get_compat_msghdr+0x108/0x2b0 [ 1222.159104][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1222.163585][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1222.168258][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1222.174317][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1222.180466][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1222.185750][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1222.190604][T25588] do_SYSENTER_32+0x73/0x90 [ 1222.195133][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1222.201608][T25588] [ 1222.203926][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1222.210585][T25588] do_recvmmsg+0xbf/0x22c0 [ 1222.214997][T25588] do_recvmmsg+0xbf/0x22c0 [ 1222.417835][T25588] not chained 110000 origins [ 1222.422479][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1222.431159][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1222.441573][T25588] Call Trace: [ 1222.444882][T25588] dump_stack+0x21c/0x280 [ 1222.449219][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1222.455277][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1222.460612][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1222.466184][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1222.472409][T25588] ? _copy_from_user+0x201/0x310 [ 1222.477374][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1222.482686][T25588] __msan_chain_origin+0x50/0x90 [ 1222.487893][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1222.493350][T25588] get_compat_msghdr+0x108/0x2b0 [ 1222.498281][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1222.502771][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1222.508576][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1222.513771][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1222.518960][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1222.524839][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1222.530031][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1222.535663][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1222.540935][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1222.545677][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1222.550452][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1222.555264][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1222.561332][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1222.567477][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1222.572672][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1222.577505][T25588] do_SYSENTER_32+0x73/0x90 [ 1222.581993][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1222.588309][T25588] RIP: 0023:0xf7f0c549 [ 1222.592365][T25588] Code: Bad RIP value. [ 1222.596424][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1222.604829][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1222.613262][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1222.621231][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1222.629222][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1222.637192][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1222.646109][T25588] Uninit was stored to memory at: [ 1222.651127][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1222.656830][T25588] __msan_chain_origin+0x50/0x90 [ 1222.661765][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1222.666859][T25588] get_compat_msghdr+0x108/0x2b0 [ 1222.671785][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1222.676363][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1222.681027][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1222.687095][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1222.693275][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1222.698461][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1222.703292][T25588] do_SYSENTER_32+0x73/0x90 [ 1222.707787][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1222.714097][T25588] [ 1222.716404][T25588] Uninit was stored to memory at: [ 1222.721413][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1222.727123][T25588] __msan_chain_origin+0x50/0x90 [ 1222.732059][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1222.737150][T25588] get_compat_msghdr+0x108/0x2b0 [ 1222.742087][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1222.746573][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1222.751240][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1222.757285][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1222.763431][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1222.768652][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1222.773496][T25588] do_SYSENTER_32+0x73/0x90 [ 1222.777981][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1222.784277][T25588] [ 1222.786622][T25588] Uninit was stored to memory at: [ 1222.791647][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1222.797359][T25588] __msan_chain_origin+0x50/0x90 [ 1222.802796][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1222.808101][T25588] get_compat_msghdr+0x108/0x2b0 [ 1222.813053][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1222.817543][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1222.822294][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1222.828354][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1222.834515][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1222.839707][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1222.844549][T25588] do_SYSENTER_32+0x73/0x90 [ 1222.849040][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1222.855350][T25588] [ 1222.857658][T25588] Uninit was stored to memory at: [ 1222.862686][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1222.868390][T25588] __msan_chain_origin+0x50/0x90 [ 1222.873329][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1222.878422][T25588] get_compat_msghdr+0x108/0x2b0 [ 1222.883334][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1222.887825][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1222.892496][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1222.898546][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1222.904683][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1222.909867][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1222.914694][T25588] do_SYSENTER_32+0x73/0x90 [ 1222.919191][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1222.925509][T25588] [ 1222.927846][T25588] Uninit was stored to memory at: [ 1222.932875][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1222.938583][T25588] __msan_chain_origin+0x50/0x90 [ 1222.943503][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1222.948600][T25588] get_compat_msghdr+0x108/0x2b0 [ 1222.953529][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1222.958027][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1222.962698][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1222.968754][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1222.974908][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1222.980125][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1222.984988][T25588] do_SYSENTER_32+0x73/0x90 [ 1222.989505][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1222.995816][T25588] [ 1222.998238][T25588] Uninit was stored to memory at: [ 1223.003297][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.009021][T25588] __msan_chain_origin+0x50/0x90 [ 1223.013939][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.019031][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.023944][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.028452][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.033126][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.039175][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.045332][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.050577][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.055453][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.060060][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.066371][T25588] [ 1223.068712][T25588] Uninit was stored to memory at: [ 1223.073728][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.079437][T25588] __msan_chain_origin+0x50/0x90 [ 1223.084366][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.089484][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.094412][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.098906][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.103584][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.109658][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.115803][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.120989][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.125834][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.130335][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.136632][T25588] [ 1223.138948][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1223.146038][T25588] do_recvmmsg+0xbf/0x22c0 [ 1223.150450][T25588] do_recvmmsg+0xbf/0x22c0 [ 1223.293679][T25588] not chained 120000 origins [ 1223.298322][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1223.307002][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.317062][T25588] Call Trace: [ 1223.320398][T25588] dump_stack+0x21c/0x280 [ 1223.324757][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1223.330547][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1223.335760][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1223.341420][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1223.347856][T25588] ? _copy_from_user+0x201/0x310 [ 1223.352822][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1223.358034][T25588] __msan_chain_origin+0x50/0x90 [ 1223.362996][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.368140][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.373099][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.377618][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1223.383488][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1223.388707][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1223.393927][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1223.399846][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1223.405063][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1223.410980][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1223.416281][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1223.421057][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1223.425833][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.430544][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.436637][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.443154][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.448370][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.453237][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.457755][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.464433][T25588] RIP: 0023:0xf7f0c549 [ 1223.469797][T25588] Code: Bad RIP value. [ 1223.473871][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1223.482751][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1223.492066][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1223.500046][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1223.508024][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1223.517045][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1223.525032][T25588] Uninit was stored to memory at: [ 1223.530069][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.535797][T25588] __msan_chain_origin+0x50/0x90 [ 1223.540834][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.545948][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.551167][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.555686][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.560376][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.566459][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.572626][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.577834][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.582695][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.590854][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.597185][T25588] [ 1223.599513][T25588] Uninit was stored to memory at: [ 1223.604638][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.610380][T25588] __msan_chain_origin+0x50/0x90 [ 1223.615322][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.620440][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.625384][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.629891][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.634575][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.640649][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.646829][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.652061][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.656923][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.661882][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.668473][T25588] [ 1223.670809][T25588] Uninit was stored to memory at: [ 1223.675892][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.681628][T25588] __msan_chain_origin+0x50/0x90 [ 1223.686570][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.691902][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.696838][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.701469][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.706159][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.713256][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.719844][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.725033][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.729899][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.735019][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.741316][T25588] [ 1223.743633][T25588] Uninit was stored to memory at: [ 1223.748824][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.754549][T25588] __msan_chain_origin+0x50/0x90 [ 1223.759467][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.764674][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.769617][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.774229][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.778899][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.784969][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.791292][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.797284][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.802134][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.806898][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.813559][T25588] [ 1223.815872][T25588] Uninit was stored to memory at: [ 1223.820954][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.826765][T25588] __msan_chain_origin+0x50/0x90 [ 1223.831687][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.836775][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.841701][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.846193][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.850855][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.856909][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.863056][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.868376][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.873231][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.877766][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.889040][T25588] [ 1223.892171][T25588] Uninit was stored to memory at: [ 1223.897276][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.903099][T25588] __msan_chain_origin+0x50/0x90 [ 1223.908040][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.913195][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.918170][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.922669][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.927639][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1223.934419][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1223.940562][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1223.945763][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1223.950796][T25588] do_SYSENTER_32+0x73/0x90 [ 1223.955288][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1223.961584][T25588] [ 1223.963895][T25588] Uninit was stored to memory at: [ 1223.968932][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1223.974691][T25588] __msan_chain_origin+0x50/0x90 [ 1223.979630][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1223.984731][T25588] get_compat_msghdr+0x108/0x2b0 [ 1223.989661][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1223.994168][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1223.998844][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.004908][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.012542][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.017724][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.022555][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.027051][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.033377][T25588] [ 1224.035681][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1224.042339][T25588] do_recvmmsg+0xbf/0x22c0 [ 1224.046745][T25588] do_recvmmsg+0xbf/0x22c0 [ 1224.186448][T25588] not chained 130000 origins [ 1224.191094][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1224.199766][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1224.209847][T25588] Call Trace: [ 1224.213153][T25588] dump_stack+0x21c/0x280 [ 1224.217508][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1224.223260][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1224.228480][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1224.234039][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1224.240125][T25588] ? _copy_from_user+0x201/0x310 [ 1224.245072][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1224.250280][T25588] __msan_chain_origin+0x50/0x90 [ 1224.255242][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.260394][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.265386][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.269889][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1224.275780][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1224.280957][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1224.286154][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1224.292045][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1224.297228][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1224.302839][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1224.308185][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1224.312926][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1224.317694][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.322360][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.328491][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.334642][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.339893][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.344743][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.349516][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.355826][T25588] RIP: 0023:0xf7f0c549 [ 1224.359972][T25588] Code: Bad RIP value. [ 1224.364057][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1224.372547][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1224.380503][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1224.388456][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1224.396420][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1224.404465][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.412433][T25588] Uninit was stored to memory at: [ 1224.418274][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1224.424617][T25588] __msan_chain_origin+0x50/0x90 [ 1224.430061][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.438482][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.443556][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.449474][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.454426][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.461200][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.468594][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.476296][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.481956][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.486853][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.494507][T25588] [ 1224.497092][T25588] Uninit was stored to memory at: [ 1224.502142][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1224.507859][T25588] __msan_chain_origin+0x50/0x90 [ 1224.513042][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.518596][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.523785][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.528567][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.533295][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.539377][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.545539][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.550843][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.555679][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.560277][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.567471][T25588] [ 1224.569777][T25588] Uninit was stored to memory at: [ 1224.574808][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1224.581526][T25588] __msan_chain_origin+0x50/0x90 [ 1224.586461][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.591885][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.597061][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.601557][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.609058][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.616680][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.623032][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.628577][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.633775][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.638378][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.645124][T25588] [ 1224.647612][T25588] Uninit was stored to memory at: [ 1224.653601][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1224.661220][T25588] __msan_chain_origin+0x50/0x90 [ 1224.666267][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.673927][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.679733][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.684429][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.689442][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.696042][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.702545][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.708008][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.713653][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.718915][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.726029][T25588] [ 1224.728678][T25588] Uninit was stored to memory at: [ 1224.734132][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1224.740237][T25588] __msan_chain_origin+0x50/0x90 [ 1224.745199][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.751219][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.758408][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.765273][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.770493][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.776690][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.783466][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.788841][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.793857][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.801152][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.807462][T25588] [ 1224.809964][T25588] Uninit was stored to memory at: [ 1224.815791][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1224.821708][T25588] __msan_chain_origin+0x50/0x90 [ 1224.827142][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.832826][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.837778][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.842368][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.847178][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.853293][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.859622][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.864937][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.869800][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.874323][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.880678][T25588] [ 1224.882998][T25588] Uninit was stored to memory at: [ 1224.888177][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1224.893903][T25588] __msan_chain_origin+0x50/0x90 [ 1224.899756][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1224.904864][T25588] get_compat_msghdr+0x108/0x2b0 [ 1224.910843][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1224.915338][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1224.920177][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1224.926323][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1224.932561][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1224.937767][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1224.942615][T25588] do_SYSENTER_32+0x73/0x90 [ 1224.947110][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1224.953436][T25588] [ 1224.955778][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1224.963677][T25588] do_recvmmsg+0xbf/0x22c0 [ 1224.968108][T25588] do_recvmmsg+0xbf/0x22c0 [ 1225.176992][T25588] not chained 140000 origins [ 1225.181641][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1225.192343][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.203047][T25588] Call Trace: [ 1225.206365][T25588] dump_stack+0x21c/0x280 [ 1225.210739][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1225.216518][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1225.222258][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1225.227820][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1225.234257][T25588] ? _copy_from_user+0x201/0x310 [ 1225.239364][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1225.244659][T25588] __msan_chain_origin+0x50/0x90 [ 1225.249783][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.254912][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.260122][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.264750][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1225.270561][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1225.276020][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1225.281218][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1225.287115][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1225.292323][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1225.298311][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1225.303679][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1225.308428][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1225.313175][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.317841][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.326087][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.332561][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.337831][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.343014][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.347619][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.353950][T25588] RIP: 0023:0xf7f0c549 [ 1225.358007][T25588] Code: Bad RIP value. [ 1225.362055][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1225.370446][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1225.378396][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1225.386354][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1225.394309][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1225.402272][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1225.410252][T25588] Uninit was stored to memory at: [ 1225.415358][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1225.421414][T25588] __msan_chain_origin+0x50/0x90 [ 1225.426336][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.431427][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.436344][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.440825][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.445478][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.451531][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.458017][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.465478][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.470332][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.475084][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.481398][T25588] [ 1225.483820][T25588] Uninit was stored to memory at: [ 1225.489319][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1225.495063][T25588] __msan_chain_origin+0x50/0x90 [ 1225.500001][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.505125][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.510138][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.514632][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.519289][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.525342][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.531475][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.536662][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.541502][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.546004][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.552310][T25588] [ 1225.554626][T25588] Uninit was stored to memory at: [ 1225.559645][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1225.565386][T25588] __msan_chain_origin+0x50/0x90 [ 1225.570321][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.575411][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.580351][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.584880][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.589544][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.595588][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.601738][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.606916][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.611766][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.616282][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.622865][T25588] [ 1225.625515][T25588] Uninit was stored to memory at: [ 1225.631523][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1225.637226][T25588] __msan_chain_origin+0x50/0x90 [ 1225.642217][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.647338][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.652277][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.656759][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.661418][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.667462][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.673594][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.678771][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.683616][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.688096][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.694407][T25588] [ 1225.696719][T25588] Uninit was stored to memory at: [ 1225.701744][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1225.707579][T25588] __msan_chain_origin+0x50/0x90 [ 1225.712561][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.717667][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.722613][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.727147][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.731840][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.737891][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.744028][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.749226][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.754054][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.758535][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.764831][T25588] [ 1225.767137][T25588] Uninit was stored to memory at: [ 1225.772152][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1225.777869][T25588] __msan_chain_origin+0x50/0x90 [ 1225.782785][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.787876][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.792792][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.797282][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.801981][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.808050][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.814197][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.819403][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.824241][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.828741][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.835052][T25588] [ 1225.837358][T25588] Uninit was stored to memory at: [ 1225.842364][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1225.848059][T25588] __msan_chain_origin+0x50/0x90 [ 1225.852973][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1225.858087][T25588] get_compat_msghdr+0x108/0x2b0 [ 1225.863018][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1225.867513][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1225.872169][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1225.878214][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1225.884361][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1225.889686][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1225.894587][T25588] do_SYSENTER_32+0x73/0x90 [ 1225.899089][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1225.905391][T25588] [ 1225.907727][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1225.914380][T25588] do_recvmmsg+0xbf/0x22c0 [ 1225.918773][T25588] do_recvmmsg+0xbf/0x22c0 [ 1226.121402][T25588] not chained 150000 origins [ 1226.126047][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1226.134744][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.144801][T25588] Call Trace: [ 1226.148133][T25588] dump_stack+0x21c/0x280 [ 1226.152506][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1226.158263][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1226.163474][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1226.169041][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1226.175123][T25588] ? _copy_from_user+0x201/0x310 [ 1226.180074][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1226.185288][T25588] __msan_chain_origin+0x50/0x90 [ 1226.190246][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.195365][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.200292][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.204785][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1226.210582][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1226.215760][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1226.221015][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1226.227185][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1226.232376][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1226.238011][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1226.243312][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1226.248202][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1226.253090][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.257783][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.263896][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.270055][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.275260][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.280099][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.284582][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.290886][T25588] RIP: 0023:0xf7f0c549 [ 1226.294927][T25588] Code: Bad RIP value. [ 1226.298969][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1226.307621][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1226.315600][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.323700][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.331708][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1226.339663][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.347975][T25588] Uninit was stored to memory at: [ 1226.353000][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1226.358726][T25588] __msan_chain_origin+0x50/0x90 [ 1226.363643][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.368751][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.373665][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.378148][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.382808][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.388858][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.394991][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.400192][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.405018][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.409514][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.415842][T25588] [ 1226.419447][T25588] Uninit was stored to memory at: [ 1226.424458][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1226.430434][T25588] __msan_chain_origin+0x50/0x90 [ 1226.435464][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.440607][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.445549][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.450141][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.454887][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.461337][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.468208][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.473615][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.478740][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.483279][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.489591][T25588] [ 1226.491901][T25588] Uninit was stored to memory at: [ 1226.496966][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1226.502709][T25588] __msan_chain_origin+0x50/0x90 [ 1226.507671][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.512846][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.517784][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.522421][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.527100][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.533153][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.539305][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.544490][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.549324][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.553878][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.560189][T25588] [ 1226.562496][T25588] Uninit was stored to memory at: [ 1226.567513][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1226.573267][T25588] __msan_chain_origin+0x50/0x90 [ 1226.578320][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.583450][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.588393][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.592875][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.597550][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.603632][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.609789][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.614977][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.619813][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.624297][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.630607][T25588] [ 1226.632911][T25588] Uninit was stored to memory at: [ 1226.638354][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1226.644066][T25588] __msan_chain_origin+0x50/0x90 [ 1226.648983][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.654070][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.659095][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.663587][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.668244][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.674296][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.680464][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.685646][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.690492][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.694977][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.701563][T25588] [ 1226.703876][T25588] Uninit was stored to memory at: [ 1226.708893][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1226.714633][T25588] __msan_chain_origin+0x50/0x90 [ 1226.719664][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.724883][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.730003][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.734499][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.739428][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.745628][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.751882][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.757089][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.761967][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.766484][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.772818][T25588] [ 1226.775152][T25588] Uninit was stored to memory at: [ 1226.780178][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1226.785882][T25588] __msan_chain_origin+0x50/0x90 [ 1226.790797][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1226.795936][T25588] get_compat_msghdr+0x108/0x2b0 [ 1226.800865][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1226.805343][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1226.809997][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1226.816061][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1226.822205][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1226.827387][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1226.832215][T25588] do_SYSENTER_32+0x73/0x90 [ 1226.836702][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1226.843023][T25588] [ 1226.845337][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1226.852010][T25588] do_recvmmsg+0xbf/0x22c0 [ 1226.856419][T25588] do_recvmmsg+0xbf/0x22c0 [ 1226.993227][T25588] not chained 160000 origins [ 1226.997877][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1227.006553][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.016709][T25588] Call Trace: [ 1227.020014][T25588] dump_stack+0x21c/0x280 [ 1227.024394][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1227.030145][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1227.035357][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1227.040918][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1227.046998][T25588] ? _copy_from_user+0x201/0x310 [ 1227.051948][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1227.057163][T25588] __msan_chain_origin+0x50/0x90 [ 1227.062114][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.067432][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.072584][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.077193][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1227.083031][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1227.088264][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1227.093486][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1227.099400][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1227.104633][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1227.110293][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1227.115780][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1227.120560][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1227.125342][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.130050][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.136143][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.142321][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.147545][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.152418][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.156944][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.163285][T25588] RIP: 0023:0xf7f0c549 [ 1227.167384][T25588] Code: Bad RIP value. [ 1227.171450][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1227.179871][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1227.187860][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1227.198795][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1227.206772][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1227.214756][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1227.222750][T25588] Uninit was stored to memory at: [ 1227.227790][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1227.233515][T25588] __msan_chain_origin+0x50/0x90 [ 1227.238495][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.243620][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.248563][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.253068][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.257758][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.263843][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.270059][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.275273][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.280127][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.284621][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.290921][T25588] [ 1227.293227][T25588] Uninit was stored to memory at: [ 1227.301196][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1227.306905][T25588] __msan_chain_origin+0x50/0x90 [ 1227.311821][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.316917][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.321832][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.326327][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.331006][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.337415][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.343553][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.348733][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.353576][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.358089][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.364392][T25588] [ 1227.366708][T25588] Uninit was stored to memory at: [ 1227.371727][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1227.377447][T25588] __msan_chain_origin+0x50/0x90 [ 1227.382364][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.387456][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.392369][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.396852][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.401521][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.407653][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.413797][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.419003][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.423831][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.428332][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.434638][T25588] [ 1227.436955][T25588] Uninit was stored to memory at: [ 1227.441978][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1227.447691][T25588] __msan_chain_origin+0x50/0x90 [ 1227.452607][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.457838][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.462848][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.467581][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.472470][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.478541][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.484698][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.489947][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.494811][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.499499][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.505834][T25588] [ 1227.508521][T25588] Uninit was stored to memory at: [ 1227.513733][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1227.519551][T25588] __msan_chain_origin+0x50/0x90 [ 1227.524505][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.529641][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.534625][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.539745][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.544418][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.550634][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.556801][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.562012][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.566937][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.571423][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.577822][T25588] [ 1227.580142][T25588] Uninit was stored to memory at: [ 1227.585297][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1227.591074][T25588] __msan_chain_origin+0x50/0x90 [ 1227.596007][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.601198][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.606141][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.610639][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.615322][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.621569][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.628042][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.633252][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.638120][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.642750][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.649380][T25588] [ 1227.651711][T25588] Uninit was stored to memory at: [ 1227.656833][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1227.662612][T25588] __msan_chain_origin+0x50/0x90 [ 1227.668025][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1227.673249][T25588] get_compat_msghdr+0x108/0x2b0 [ 1227.678202][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1227.682696][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1227.687387][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1227.693609][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1227.699835][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1227.705046][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1227.709911][T25588] do_SYSENTER_32+0x73/0x90 [ 1227.714427][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1227.720739][T25588] [ 1227.723060][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1227.729742][T25588] do_recvmmsg+0xbf/0x22c0 [ 1227.734142][T25588] do_recvmmsg+0xbf/0x22c0 [ 1228.249118][T25588] not chained 170000 origins [ 1228.253937][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1228.262583][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.272852][T25588] Call Trace: [ 1228.276137][T25588] dump_stack+0x21c/0x280 [ 1228.280466][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1228.286183][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1228.291375][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1228.296903][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1228.302955][T25588] ? _copy_from_user+0x201/0x310 [ 1228.307876][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1228.313053][T25588] __msan_chain_origin+0x50/0x90 [ 1228.317972][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.323290][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.328231][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.332720][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1228.338633][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1228.343915][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1228.349466][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1228.355356][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1228.360579][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1228.366217][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1228.371570][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1228.376326][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1228.381070][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.385737][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.391855][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.398009][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.403215][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.408059][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.412542][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.418861][T25588] RIP: 0023:0xf7f0c549 [ 1228.422900][T25588] Code: Bad RIP value. [ 1228.426945][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1228.435331][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1228.443310][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1228.451378][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1228.460011][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1228.467975][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1228.476320][T25588] Uninit was stored to memory at: [ 1228.481459][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1228.487203][T25588] __msan_chain_origin+0x50/0x90 [ 1228.492477][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.497587][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.502531][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.507011][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.511663][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.517811][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.523958][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.529150][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.533977][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.538456][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.544750][T25588] [ 1228.547053][T25588] Uninit was stored to memory at: [ 1228.552062][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1228.557788][T25588] __msan_chain_origin+0x50/0x90 [ 1228.562790][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.568019][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.572977][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.577492][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.582173][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.588236][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.594375][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.599552][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.604395][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.608884][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.615228][T25588] [ 1228.617601][T25588] Uninit was stored to memory at: [ 1228.622625][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1228.628360][T25588] __msan_chain_origin+0x50/0x90 [ 1228.633282][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.638379][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.643295][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.647798][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.652472][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.658542][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.664683][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.669863][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.674714][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.679203][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.685500][T25588] [ 1228.687803][T25588] Uninit was stored to memory at: [ 1228.692807][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1228.698507][T25588] __msan_chain_origin+0x50/0x90 [ 1228.703423][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.708523][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.713453][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.717938][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.722656][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.728723][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.734962][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.740141][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.744969][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.749452][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.755763][T25588] [ 1228.758079][T25588] Uninit was stored to memory at: [ 1228.763094][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1228.768804][T25588] __msan_chain_origin+0x50/0x90 [ 1228.773724][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.778817][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.783821][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.788325][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.792988][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.799037][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.805174][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.810467][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.815297][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.819790][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.826100][T25588] [ 1228.828401][T25588] Uninit was stored to memory at: [ 1228.833402][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1228.839095][T25588] __msan_chain_origin+0x50/0x90 [ 1228.844095][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.849181][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.854103][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.858592][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.863344][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.869386][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.875515][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.880700][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.886145][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.890624][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.897009][T25588] [ 1228.899312][T25588] Uninit was stored to memory at: [ 1228.904325][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1228.910037][T25588] __msan_chain_origin+0x50/0x90 [ 1228.914959][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1228.920070][T25588] get_compat_msghdr+0x108/0x2b0 [ 1228.925073][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1228.930003][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1228.934756][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1228.940826][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1228.946958][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1228.952136][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1228.956972][T25588] do_SYSENTER_32+0x73/0x90 [ 1228.961460][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1228.968015][T25588] [ 1228.970317][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1228.977075][T25588] do_recvmmsg+0xbf/0x22c0 [ 1228.981474][T25588] do_recvmmsg+0xbf/0x22c0 [ 1229.168007][T25588] not chained 180000 origins [ 1229.172665][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1229.181340][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.191411][T25588] Call Trace: [ 1229.194893][T25588] dump_stack+0x21c/0x280 [ 1229.199253][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1229.205001][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1229.210293][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1229.215944][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1229.222026][T25588] ? _copy_from_user+0x201/0x310 [ 1229.227245][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1229.232462][T25588] __msan_chain_origin+0x50/0x90 [ 1229.237413][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.242565][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.247520][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.252121][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1229.257945][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1229.263156][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1229.268363][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1229.274276][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1229.279479][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1229.285122][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1229.290419][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1229.295212][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1229.299989][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.304731][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.310816][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.317101][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.322317][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.327184][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.331712][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.338073][T25588] RIP: 0023:0xf7f0c549 [ 1229.342231][T25588] Code: Bad RIP value. [ 1229.346471][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1229.357075][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1229.365116][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1229.373175][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1229.381130][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1229.389191][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1229.397259][T25588] Uninit was stored to memory at: [ 1229.402374][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1229.408089][T25588] __msan_chain_origin+0x50/0x90 [ 1229.413127][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.418217][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.423132][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.427625][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.432544][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.438727][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.445039][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.450226][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.455268][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.459779][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.466357][T25588] [ 1229.468695][T25588] Uninit was stored to memory at: [ 1229.473832][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1229.479731][T25588] __msan_chain_origin+0x50/0x90 [ 1229.484680][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.490402][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.495415][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.500017][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.504715][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.510766][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.516913][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.522111][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.526947][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.531442][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.537741][T25588] [ 1229.540057][T25588] Uninit was stored to memory at: [ 1229.545079][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1229.550785][T25588] __msan_chain_origin+0x50/0x90 [ 1229.556063][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.561155][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.566068][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.570553][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.575206][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.581258][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.587391][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.592581][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.597409][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.601888][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.608273][T25588] [ 1229.611278][T25588] Uninit was stored to memory at: [ 1229.616291][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1229.622003][T25588] __msan_chain_origin+0x50/0x90 [ 1229.626946][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.632055][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.636993][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.641496][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.646163][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.652217][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.658361][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.663550][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.668395][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.672968][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.679286][T25588] [ 1229.681604][T25588] Uninit was stored to memory at: [ 1229.686619][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1229.692325][T25588] __msan_chain_origin+0x50/0x90 [ 1229.697243][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.702343][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.707255][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.711907][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.716577][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.722653][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.728793][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.733976][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.738818][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.743687][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.750165][T25588] [ 1229.752471][T25588] Uninit was stored to memory at: [ 1229.757571][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1229.763716][T25588] __msan_chain_origin+0x50/0x90 [ 1229.768852][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.773947][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.778860][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.783342][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.788006][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.794075][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.800217][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.805488][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.810327][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.815162][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.821457][T25588] [ 1229.823782][T25588] Uninit was stored to memory at: [ 1229.828784][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1229.834579][T25588] __msan_chain_origin+0x50/0x90 [ 1229.839507][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1229.844599][T25588] get_compat_msghdr+0x108/0x2b0 [ 1229.849600][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1229.854089][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1229.858746][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1229.864790][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1229.870926][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1229.876108][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1229.880942][T25588] do_SYSENTER_32+0x73/0x90 [ 1229.885435][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1229.891735][T25588] [ 1229.894043][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1229.900698][T25588] do_recvmmsg+0xbf/0x22c0 [ 1229.905091][T25588] do_recvmmsg+0xbf/0x22c0 [ 1230.050753][T25588] not chained 190000 origins [ 1230.055409][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1230.064252][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.074309][T25588] Call Trace: [ 1230.077628][T25588] dump_stack+0x21c/0x280 [ 1230.081977][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1230.087732][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1230.092942][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1230.098496][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1230.104581][T25588] ? _copy_from_user+0x201/0x310 [ 1230.109559][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1230.114768][T25588] __msan_chain_origin+0x50/0x90 [ 1230.119732][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.124878][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.130098][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.134986][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1230.140820][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1230.146043][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1230.151255][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1230.157158][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1230.162379][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1230.168030][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1230.173325][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1230.178701][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1230.183566][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.188269][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.194353][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.200519][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.205734][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.210685][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.215223][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.221559][T25588] RIP: 0023:0xf7f0c549 [ 1230.225620][T25588] Code: Bad RIP value. [ 1230.229683][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1230.238789][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1230.246761][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1230.255124][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1230.263105][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1230.271072][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1230.279042][T25588] Uninit was stored to memory at: [ 1230.284091][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1230.289818][T25588] __msan_chain_origin+0x50/0x90 [ 1230.294742][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.299852][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.304783][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.309325][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.314020][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.320106][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.326247][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.331427][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.336270][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.340751][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.347142][T25588] [ 1230.349725][T25588] Uninit was stored to memory at: [ 1230.354759][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1230.360461][T25588] __msan_chain_origin+0x50/0x90 [ 1230.365395][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.370508][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.375446][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.380083][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.384781][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.390862][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.397021][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.402201][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.407037][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.411531][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.417982][T25588] [ 1230.420338][T25588] Uninit was stored to memory at: [ 1230.425373][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1230.431090][T25588] __msan_chain_origin+0x50/0x90 [ 1230.436017][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.441201][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.446144][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.450626][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.455293][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.461360][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.467665][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.473329][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.478183][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.482769][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.489168][T25588] [ 1230.491500][T25588] Uninit was stored to memory at: [ 1230.496512][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1230.502208][T25588] __msan_chain_origin+0x50/0x90 [ 1230.507136][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.512243][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.518547][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.523159][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.528727][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.534787][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.540944][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.546213][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.551055][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.555538][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.561836][T25588] [ 1230.564668][T25588] Uninit was stored to memory at: [ 1230.569711][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1230.575440][T25588] __msan_chain_origin+0x50/0x90 [ 1230.580355][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.585457][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.591444][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.595943][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.600753][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.606813][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.612947][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.618125][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.622956][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.627446][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.633893][T25588] [ 1230.636206][T25588] Uninit was stored to memory at: [ 1230.641218][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1230.646936][T25588] __msan_chain_origin+0x50/0x90 [ 1230.651881][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.656997][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.661911][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.666417][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.671090][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.677149][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.683415][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.688617][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.693458][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.697950][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.704251][T25588] [ 1230.706578][T25588] Uninit was stored to memory at: [ 1230.711707][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1230.717417][T25588] __msan_chain_origin+0x50/0x90 [ 1230.722362][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1230.727460][T25588] get_compat_msghdr+0x108/0x2b0 [ 1230.732391][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1230.736889][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1230.741546][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1230.747597][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1230.753742][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1230.758951][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1230.765009][T25588] do_SYSENTER_32+0x73/0x90 [ 1230.769515][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1230.775818][T25588] [ 1230.778124][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1230.784792][T25588] do_recvmmsg+0xbf/0x22c0 [ 1230.789213][T25588] do_recvmmsg+0xbf/0x22c0 [ 1230.981801][T25588] not chained 200000 origins [ 1230.986450][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1230.995118][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.005173][T25588] Call Trace: [ 1231.008481][T25588] dump_stack+0x21c/0x280 [ 1231.012820][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1231.018538][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1231.023715][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1231.029388][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1231.035462][T25588] ? _copy_from_user+0x201/0x310 [ 1231.040411][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1231.045592][T25588] __msan_chain_origin+0x50/0x90 [ 1231.050515][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.055616][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.060537][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.065059][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1231.070857][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1231.076074][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1231.081290][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1231.087204][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1231.092415][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1231.098072][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1231.103366][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1231.108228][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1231.114020][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.118722][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.124881][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.131209][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.136424][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.141276][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.145778][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.153615][T25588] RIP: 0023:0xf7f0c549 [ 1231.157773][T25588] Code: Bad RIP value. [ 1231.161923][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1231.170514][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1231.178653][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1231.186970][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1231.195076][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1231.203052][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1231.211115][T25588] Uninit was stored to memory at: [ 1231.216139][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1231.221843][T25588] __msan_chain_origin+0x50/0x90 [ 1231.226780][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.232115][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.237039][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.241528][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.246197][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.252265][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.258413][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.263599][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.268545][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.273030][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.280281][T25588] [ 1231.282597][T25588] Uninit was stored to memory at: [ 1231.287615][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1231.293323][T25588] __msan_chain_origin+0x50/0x90 [ 1231.298301][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.303613][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.308887][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.313545][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.318214][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.324355][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.330491][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.335672][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.340508][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.344989][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.351285][T25588] [ 1231.353674][T25588] Uninit was stored to memory at: [ 1231.358676][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1231.364384][T25588] __msan_chain_origin+0x50/0x90 [ 1231.369303][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.374392][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.379315][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.383792][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.388471][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.394512][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.400651][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.405853][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.410692][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.415192][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.421517][T25588] [ 1231.423833][T25588] Uninit was stored to memory at: [ 1231.428843][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1231.434557][T25588] __msan_chain_origin+0x50/0x90 [ 1231.439472][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.444559][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.449484][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.453963][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.458622][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.464677][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.470970][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.476416][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.481280][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.486387][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.492692][T25588] [ 1231.495002][T25588] Uninit was stored to memory at: [ 1231.500114][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1231.505913][T25588] __msan_chain_origin+0x50/0x90 [ 1231.511003][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.516104][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.521294][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.525791][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.530476][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.536523][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.542761][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.547948][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.552780][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.557287][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.564294][T25588] [ 1231.566613][T25588] Uninit was stored to memory at: [ 1231.571617][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1231.577352][T25588] __msan_chain_origin+0x50/0x90 [ 1231.582287][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.587388][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.592328][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.596812][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.601480][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.607525][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.613667][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.618860][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.623760][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.628248][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.634566][T25588] [ 1231.636876][T25588] Uninit was stored to memory at: [ 1231.641986][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1231.647684][T25588] __msan_chain_origin+0x50/0x90 [ 1231.652602][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1231.657707][T25588] get_compat_msghdr+0x108/0x2b0 [ 1231.662621][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1231.667099][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1231.671779][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1231.677837][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1231.683983][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1231.689160][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1231.693988][T25588] do_SYSENTER_32+0x73/0x90 [ 1231.698467][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1231.704760][T25588] [ 1231.707065][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1231.713724][T25588] do_recvmmsg+0xbf/0x22c0 [ 1231.718134][T25588] do_recvmmsg+0xbf/0x22c0 [ 1231.934244][T25588] not chained 210000 origins [ 1231.938884][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1231.947552][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.957620][T25588] Call Trace: [ 1231.960940][T25588] dump_stack+0x21c/0x280 [ 1231.965288][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1231.971043][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1231.976246][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1231.981805][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1231.987913][T25588] ? _copy_from_user+0x201/0x310 [ 1231.992871][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1231.998101][T25588] __msan_chain_origin+0x50/0x90 [ 1232.003043][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.008148][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.013086][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.017666][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1232.023475][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.028654][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.033831][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1232.039709][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.044888][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1232.050502][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1232.055765][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1232.060520][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1232.065261][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.069928][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.076160][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.082302][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.087486][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.092314][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.096835][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.103148][T25588] RIP: 0023:0xf7f0c549 [ 1232.107191][T25588] Code: Bad RIP value. [ 1232.111238][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1232.119733][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1232.127717][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.135693][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.143654][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1232.151606][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1232.159567][T25588] Uninit was stored to memory at: [ 1232.164581][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1232.170296][T25588] __msan_chain_origin+0x50/0x90 [ 1232.175211][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.180315][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.185228][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.189727][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.194381][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.200429][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.206830][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.212989][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.217915][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.222406][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.228713][T25588] [ 1232.231016][T25588] Uninit was stored to memory at: [ 1232.236020][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1232.242004][T25588] __msan_chain_origin+0x50/0x90 [ 1232.246935][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.252036][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.256960][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.261448][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.266115][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.272161][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.278290][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.283473][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.288302][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.292782][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.299102][T25588] [ 1232.301521][T25588] Uninit was stored to memory at: [ 1232.306557][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1232.312272][T25588] __msan_chain_origin+0x50/0x90 [ 1232.317213][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.322316][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.327233][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.331815][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.336468][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.342611][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.348739][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.353927][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.364574][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.369055][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.375454][T25588] [ 1232.377763][T25588] Uninit was stored to memory at: [ 1232.382806][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1232.388523][T25588] __msan_chain_origin+0x50/0x90 [ 1232.393545][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.398653][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.403584][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.408075][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.412874][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.418929][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.425071][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.430272][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.435197][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.439693][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.445991][T25588] [ 1232.448293][T25588] Uninit was stored to memory at: [ 1232.453297][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1232.459310][T25588] __msan_chain_origin+0x50/0x90 [ 1232.464363][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.470246][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.475802][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.480597][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.485487][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.491789][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.497947][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.503125][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.507966][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.512888][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.519710][T25588] [ 1232.522038][T25588] Uninit was stored to memory at: [ 1232.527128][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1232.532838][T25588] __msan_chain_origin+0x50/0x90 [ 1232.537763][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.542861][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.547784][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.552280][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.556940][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.562998][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.569318][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.574491][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.579317][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.583797][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.590354][T25588] [ 1232.592771][T25588] Uninit was stored to memory at: [ 1232.597806][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1232.604038][T25588] __msan_chain_origin+0x50/0x90 [ 1232.609150][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.614245][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.619163][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.623640][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1232.628320][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1232.634465][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1232.640630][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1232.645811][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1232.650641][T25588] do_SYSENTER_32+0x73/0x90 [ 1232.655122][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.661426][T25588] [ 1232.663753][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1232.670556][T25588] do_recvmmsg+0xbf/0x22c0 [ 1232.674954][T25588] do_recvmmsg+0xbf/0x22c0 [ 1232.872857][T25588] not chained 220000 origins [ 1232.877524][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1232.886471][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.896533][T25588] Call Trace: [ 1232.899844][T25588] dump_stack+0x21c/0x280 [ 1232.904193][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1232.910021][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.915512][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1232.921164][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1232.927250][T25588] ? _copy_from_user+0x201/0x310 [ 1232.932208][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.937485][T25588] __msan_chain_origin+0x50/0x90 [ 1232.942441][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1232.947578][T25588] get_compat_msghdr+0x108/0x2b0 [ 1232.952536][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1232.957055][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1232.962880][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.968175][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.973971][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1232.979858][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1232.985035][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1232.990666][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1232.995929][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1233.000758][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1233.005512][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.010355][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.016425][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.022571][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.027776][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.032622][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.037116][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.043619][T25588] RIP: 0023:0xf7f0c549 [ 1233.047666][T25588] Code: Bad RIP value. [ 1233.051717][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1233.060110][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1233.068075][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.076046][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1233.084225][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1233.092207][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1233.100371][T25588] Uninit was stored to memory at: [ 1233.105606][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.111307][T25588] __msan_chain_origin+0x50/0x90 [ 1233.116242][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.121350][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.126274][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.130762][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.135422][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.141467][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.147598][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.152791][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.157634][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.162131][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.168447][T25588] [ 1233.170774][T25588] Uninit was stored to memory at: [ 1233.175798][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.181521][T25588] __msan_chain_origin+0x50/0x90 [ 1233.186453][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.191544][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.196474][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.200980][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.205638][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.211772][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.217923][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.223128][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.228105][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.232598][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.238897][T25588] [ 1233.241200][T25588] Uninit was stored to memory at: [ 1233.246234][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.251938][T25588] __msan_chain_origin+0x50/0x90 [ 1233.256856][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.261946][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.266859][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.271338][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.276007][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.282070][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.288216][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.293398][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.298227][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.302732][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.309032][T25588] [ 1233.311335][T25588] Uninit was stored to memory at: [ 1233.316341][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.322039][T25588] __msan_chain_origin+0x50/0x90 [ 1233.326970][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.332078][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.336991][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.341484][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.346193][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.352245][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.358397][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.363593][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.368419][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.372904][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.379201][T25588] [ 1233.381505][T25588] Uninit was stored to memory at: [ 1233.386526][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.392243][T25588] __msan_chain_origin+0x50/0x90 [ 1233.397157][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.402260][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.407187][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.411703][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.416377][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.422422][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.428572][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.433769][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.438615][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.443098][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.449402][T25588] [ 1233.451711][T25588] Uninit was stored to memory at: [ 1233.456727][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.462432][T25588] __msan_chain_origin+0x50/0x90 [ 1233.467367][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.472458][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.477397][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.481964][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.486653][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.492718][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.498867][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.504074][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.508923][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.513411][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.519707][T25588] [ 1233.522010][T25588] Uninit was stored to memory at: [ 1233.527031][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.532728][T25588] __msan_chain_origin+0x50/0x90 [ 1233.537656][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.542746][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.547667][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.552146][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.556821][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.562879][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.569015][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.574196][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.579025][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.583512][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.589816][T25588] [ 1233.592124][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1233.598802][T25588] do_recvmmsg+0xbf/0x22c0 [ 1233.603216][T25588] do_recvmmsg+0xbf/0x22c0 [ 1233.743473][T25588] not chained 230000 origins [ 1233.748149][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1233.756836][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.766896][T25588] Call Trace: [ 1233.770202][T25588] dump_stack+0x21c/0x280 [ 1233.774590][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1233.780346][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1233.785565][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1233.791129][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1233.797213][T25588] ? _copy_from_user+0x201/0x310 [ 1233.802170][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1233.807380][T25588] __msan_chain_origin+0x50/0x90 [ 1233.812332][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.817470][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.822428][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.826960][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1233.832784][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1233.837993][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1233.843209][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1233.849113][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1233.854331][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1233.859975][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1233.865308][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1233.870086][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1233.874875][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1233.879584][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1233.885690][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1233.891864][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1233.897082][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1233.901948][T25588] do_SYSENTER_32+0x73/0x90 [ 1233.906473][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.912946][T25588] RIP: 0023:0xf7f0c549 [ 1233.917014][T25588] Code: Bad RIP value. [ 1233.921120][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1233.929549][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1233.937532][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.945509][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1233.953487][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1233.961468][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1233.969457][T25588] Uninit was stored to memory at: [ 1233.974500][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1233.980227][T25588] __msan_chain_origin+0x50/0x90 [ 1233.985201][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1233.990321][T25588] get_compat_msghdr+0x108/0x2b0 [ 1233.995256][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1233.999878][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.004564][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.010645][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.016781][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.021957][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.026813][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.031298][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.037594][T25588] [ 1234.039898][T25588] Uninit was stored to memory at: [ 1234.044916][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.050629][T25588] __msan_chain_origin+0x50/0x90 [ 1234.055546][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.060637][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.065568][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.070080][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.074758][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.080837][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.086977][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.092156][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.096982][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.101500][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.107806][T25588] [ 1234.110115][T25588] Uninit was stored to memory at: [ 1234.115155][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.120866][T25588] __msan_chain_origin+0x50/0x90 [ 1234.125807][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.130914][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.135835][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.140330][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.145000][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.151073][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.157226][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.162405][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.167237][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.171718][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.178013][T25588] [ 1234.180317][T25588] Uninit was stored to memory at: [ 1234.185334][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.191064][T25588] __msan_chain_origin+0x50/0x90 [ 1234.195988][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.201086][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.206020][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.210534][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.215224][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.221306][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.227456][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.232635][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.237487][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.241969][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.248266][T25588] [ 1234.250586][T25588] Uninit was stored to memory at: [ 1234.255616][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.261331][T25588] __msan_chain_origin+0x50/0x90 [ 1234.266354][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.271440][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.276454][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.280948][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.285608][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.291651][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.297800][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.303001][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.307839][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.312363][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.318668][T25588] [ 1234.320976][T25588] Uninit was stored to memory at: [ 1234.326006][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.331701][T25588] __msan_chain_origin+0x50/0x90 [ 1234.336631][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.341734][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.346651][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.351130][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.355798][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.361857][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.368095][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.373271][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.378104][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.382585][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.388897][T25588] [ 1234.391208][T25588] Uninit was stored to memory at: [ 1234.396225][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.401949][T25588] __msan_chain_origin+0x50/0x90 [ 1234.406896][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.411983][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.416908][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.421402][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.426090][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.432134][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.438292][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.443473][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.448304][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.452797][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.459190][T25588] [ 1234.461500][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1234.468550][T25588] do_recvmmsg+0xbf/0x22c0 [ 1234.473068][T25588] do_recvmmsg+0xbf/0x22c0 [ 1234.664353][T25588] not chained 240000 origins [ 1234.669001][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1234.677671][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.687737][T25588] Call Trace: [ 1234.691048][T25588] dump_stack+0x21c/0x280 [ 1234.695397][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1234.701145][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1234.706328][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1234.711854][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1234.717911][T25588] ? _copy_from_user+0x201/0x310 [ 1234.722833][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1234.728016][T25588] __msan_chain_origin+0x50/0x90 [ 1234.732949][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.738075][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.743027][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.747546][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1234.753345][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1234.758537][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1234.763717][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1234.769619][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1234.774830][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1234.780469][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1234.785769][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1234.790540][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1234.795310][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.800006][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.807387][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.813547][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.818758][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.823620][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.828123][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.834433][T25588] RIP: 0023:0xf7f0c549 [ 1234.838478][T25588] Code: Bad RIP value. [ 1234.842525][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1234.850928][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1234.858938][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1234.866893][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1234.874846][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1234.882796][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1234.890754][T25588] Uninit was stored to memory at: [ 1234.895765][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.901464][T25588] __msan_chain_origin+0x50/0x90 [ 1234.906390][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.911494][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.916521][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.925647][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1234.930950][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1234.937014][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1234.943163][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1234.948344][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1234.953173][T25588] do_SYSENTER_32+0x73/0x90 [ 1234.957683][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1234.964002][T25588] [ 1234.966321][T25588] Uninit was stored to memory at: [ 1234.971350][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1234.977055][T25588] __msan_chain_origin+0x50/0x90 [ 1234.981989][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1234.987081][T25588] get_compat_msghdr+0x108/0x2b0 [ 1234.991997][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1234.996494][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.001164][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.007230][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.013483][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.018677][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.023527][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.028014][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.034323][T25588] [ 1235.036635][T25588] Uninit was stored to memory at: [ 1235.041646][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.047364][T25588] __msan_chain_origin+0x50/0x90 [ 1235.052284][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.057374][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.062301][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.066778][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.071443][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.077504][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.083652][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.088947][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.093782][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.098268][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.104578][T25588] [ 1235.106892][T25588] Uninit was stored to memory at: [ 1235.111920][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.117625][T25588] __msan_chain_origin+0x50/0x90 [ 1235.122555][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.127653][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.132616][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.137099][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.141774][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.147820][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.153968][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.159144][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.163972][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.168463][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.174790][T25588] [ 1235.177103][T25588] Uninit was stored to memory at: [ 1235.182114][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.187834][T25588] __msan_chain_origin+0x50/0x90 [ 1235.192759][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.197863][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.202777][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.207257][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.211918][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.217963][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.224095][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.229272][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.234142][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.238631][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.244941][T25588] [ 1235.247264][T25588] Uninit was stored to memory at: [ 1235.252294][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.258027][T25588] __msan_chain_origin+0x50/0x90 [ 1235.262972][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.268083][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.272997][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.277475][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.282131][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.288189][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.294335][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.299529][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.304370][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.308933][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.315282][T25588] [ 1235.317598][T25588] Uninit was stored to memory at: [ 1235.322646][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.328358][T25588] __msan_chain_origin+0x50/0x90 [ 1235.333280][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.338379][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.343858][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.348350][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.353019][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.359075][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.365312][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.370653][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.375490][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.380112][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.386434][T25588] [ 1235.388746][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1235.395412][T25588] do_recvmmsg+0xbf/0x22c0 [ 1235.399839][T25588] do_recvmmsg+0xbf/0x22c0 [ 1235.613445][T25588] not chained 250000 origins [ 1235.618089][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1235.626762][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.636821][T25588] Call Trace: [ 1235.640138][T25588] dump_stack+0x21c/0x280 [ 1235.644622][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1235.650391][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1235.655607][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1235.661174][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1235.667254][T25588] ? _copy_from_user+0x201/0x310 [ 1235.672205][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1235.677498][T25588] __msan_chain_origin+0x50/0x90 [ 1235.682447][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.687580][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.692537][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.697054][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1235.702876][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1235.708365][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1235.713649][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1235.719545][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1235.724831][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1235.730456][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1235.735759][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1235.740528][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1235.745285][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.749963][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.756052][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.762287][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.767486][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.772327][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.776824][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.783207][T25588] RIP: 0023:0xf7f0c549 [ 1235.787263][T25588] Code: Bad RIP value. [ 1235.791336][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1235.799749][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1235.807787][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1235.815827][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1235.823780][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1235.831731][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1235.839688][T25588] Uninit was stored to memory at: [ 1235.844699][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.850514][T25588] __msan_chain_origin+0x50/0x90 [ 1235.855447][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.860548][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.865648][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.870125][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.874799][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.881129][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.887729][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.893427][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.898474][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.902975][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.909362][T25588] [ 1235.911687][T25588] Uninit was stored to memory at: [ 1235.916732][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.922451][T25588] __msan_chain_origin+0x50/0x90 [ 1235.927367][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1235.932609][T25588] get_compat_msghdr+0x108/0x2b0 [ 1235.937532][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1235.942015][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1235.947114][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1235.953251][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1235.960458][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1235.965655][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1235.970485][T25588] do_SYSENTER_32+0x73/0x90 [ 1235.975082][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1235.981396][T25588] [ 1235.983738][T25588] Uninit was stored to memory at: [ 1235.988746][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1235.994454][T25588] __msan_chain_origin+0x50/0x90 [ 1235.999900][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.004999][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.009914][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.014838][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.021073][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.027139][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.033290][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.038593][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.043548][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.048055][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.055593][T25588] [ 1236.057918][T25588] Uninit was stored to memory at: [ 1236.062939][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.068634][T25588] __msan_chain_origin+0x50/0x90 [ 1236.073563][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.078688][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.083751][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.088276][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.092972][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.099487][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.105631][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.110811][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.115662][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.120178][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.126479][T25588] [ 1236.128792][T25588] Uninit was stored to memory at: [ 1236.133812][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.139535][T25588] __msan_chain_origin+0x50/0x90 [ 1236.144457][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.149563][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.154578][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.159077][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.163755][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.169806][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.175954][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.181141][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.185987][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.190472][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.196772][T25588] [ 1236.199111][T25588] Uninit was stored to memory at: [ 1236.204116][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.209817][T25588] __msan_chain_origin+0x50/0x90 [ 1236.214843][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.220020][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.224947][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.229446][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.234154][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.240279][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.246414][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.251595][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.256440][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.260931][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.267231][T25588] [ 1236.269534][T25588] Uninit was stored to memory at: [ 1236.274541][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.280256][T25588] __msan_chain_origin+0x50/0x90 [ 1236.285192][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.290292][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.295229][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.299740][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.304431][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.310497][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.316639][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.321825][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.326656][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.331136][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.337433][T25588] [ 1236.339737][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1236.346389][T25588] do_recvmmsg+0xbf/0x22c0 [ 1236.350803][T25588] do_recvmmsg+0xbf/0x22c0 [ 1236.541508][T25588] not chained 260000 origins [ 1236.546384][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1236.555757][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.566086][T25588] Call Trace: [ 1236.569494][T25588] dump_stack+0x21c/0x280 [ 1236.573864][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1236.579638][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1236.584861][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1236.590426][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1236.596514][T25588] ? _copy_from_user+0x201/0x310 [ 1236.601555][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1236.606774][T25588] __msan_chain_origin+0x50/0x90 [ 1236.611739][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.617710][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.622680][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.627202][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1236.633037][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1236.638265][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1236.643485][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1236.649384][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1236.654566][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1236.660184][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1236.665448][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1236.670187][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1236.674933][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.679717][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.685795][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.692071][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.697098][ T0] NOHZ: local_softirq_pending 08 [ 1236.697355][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.707126][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.711731][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.718153][T25588] RIP: 0023:0xf7f0c549 [ 1236.722219][T25588] Code: Bad RIP value. [ 1236.726294][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1236.734816][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1236.742815][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1236.750922][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1236.758885][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1236.766951][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1236.774935][T25588] Uninit was stored to memory at: [ 1236.779988][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.785713][T25588] __msan_chain_origin+0x50/0x90 [ 1236.790675][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.795785][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.800722][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.805216][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.810153][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.816212][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.822370][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.827639][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.832488][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.837093][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.843407][T25588] [ 1236.845829][T25588] Uninit was stored to memory at: [ 1236.850850][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.856574][T25588] __msan_chain_origin+0x50/0x90 [ 1236.861509][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.866664][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.871601][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.876090][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.880746][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.886790][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.892920][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.898114][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.902964][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.907453][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.913849][T25588] [ 1236.916284][T25588] Uninit was stored to memory at: [ 1236.921312][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.927029][T25588] __msan_chain_origin+0x50/0x90 [ 1236.932043][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1236.937162][T25588] get_compat_msghdr+0x108/0x2b0 [ 1236.942098][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1236.946586][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1236.951244][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1236.957294][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1236.963429][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1236.968635][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1236.973466][T25588] do_SYSENTER_32+0x73/0x90 [ 1236.977959][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1236.984253][T25588] [ 1236.986559][T25588] Uninit was stored to memory at: [ 1236.991566][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1236.997295][T25588] __msan_chain_origin+0x50/0x90 [ 1237.002233][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.007424][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.012356][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.016976][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.021777][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.027848][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.034006][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.039197][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.044037][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.048592][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.054925][T25588] [ 1237.057269][T25588] Uninit was stored to memory at: [ 1237.062281][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.068052][T25588] __msan_chain_origin+0x50/0x90 [ 1237.072987][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.078114][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.083086][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.087570][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.092225][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.098420][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.104561][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.109761][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.114609][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.119127][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.125789][T25588] [ 1237.128119][T25588] Uninit was stored to memory at: [ 1237.133142][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.138951][T25588] __msan_chain_origin+0x50/0x90 [ 1237.143919][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.149016][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.153938][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.158464][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.163129][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.169176][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.175311][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.180516][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.185361][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.189852][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.196150][T25588] [ 1237.198453][T25588] Uninit was stored to memory at: [ 1237.203470][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.209280][T25588] __msan_chain_origin+0x50/0x90 [ 1237.214392][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.219496][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.224416][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.228915][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.233700][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.239949][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.246097][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.251297][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.256126][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.260616][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.266918][T25588] [ 1237.269228][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1237.276757][T25588] do_recvmmsg+0xbf/0x22c0 [ 1237.281150][T25588] do_recvmmsg+0xbf/0x22c0 [ 1237.424896][T25588] not chained 270000 origins [ 1237.429546][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1237.438221][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.448278][T25588] Call Trace: [ 1237.451583][T25588] dump_stack+0x21c/0x280 [ 1237.455932][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1237.461871][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1237.467110][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1237.472929][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1237.479211][T25588] ? _copy_from_user+0x201/0x310 [ 1237.484177][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1237.489397][T25588] __msan_chain_origin+0x50/0x90 [ 1237.494363][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.499509][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.504475][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.509001][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1237.514835][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1237.520056][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1237.525371][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1237.531288][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1237.536503][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1237.542151][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1237.547486][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1237.552262][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1237.557038][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.561745][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.567838][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.574008][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.579223][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.584090][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.588605][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.594934][T25588] RIP: 0023:0xf7f0c549 [ 1237.599000][T25588] Code: Bad RIP value. [ 1237.603070][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1237.611489][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1237.619469][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1237.627446][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1237.635424][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1237.643436][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.651427][T25588] Uninit was stored to memory at: [ 1237.656455][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.662156][T25588] __msan_chain_origin+0x50/0x90 [ 1237.667073][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.672162][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.677074][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.681555][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.686211][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.692286][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.698418][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.703757][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.708762][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.713250][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.719555][T25588] [ 1237.721881][T25588] Uninit was stored to memory at: [ 1237.726892][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.732615][T25588] __msan_chain_origin+0x50/0x90 [ 1237.737549][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.742643][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.747560][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.752055][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.756726][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.762774][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.768924][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.774112][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.778953][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.783442][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.789738][T25588] [ 1237.792048][T25588] Uninit was stored to memory at: [ 1237.797098][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.802817][T25588] __msan_chain_origin+0x50/0x90 [ 1237.807733][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.812843][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.817759][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.822258][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.826941][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.833007][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.839139][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.844324][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.849163][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.853661][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.860073][T25588] [ 1237.862428][T25588] Uninit was stored to memory at: [ 1237.867468][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.873190][T25588] __msan_chain_origin+0x50/0x90 [ 1237.878124][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.883302][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.888238][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.892746][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.897421][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.903539][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.909806][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.915631][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.920480][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.924978][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.931298][T25588] [ 1237.933652][T25588] Uninit was stored to memory at: [ 1237.938677][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1237.944442][T25588] __msan_chain_origin+0x50/0x90 [ 1237.949364][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1237.954461][T25588] get_compat_msghdr+0x108/0x2b0 [ 1237.959377][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1237.963914][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1237.968698][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1237.974763][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1237.980913][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1237.986115][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1237.991068][T25588] do_SYSENTER_32+0x73/0x90 [ 1237.995571][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.001875][T25588] [ 1238.004201][T25588] Uninit was stored to memory at: [ 1238.009209][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.014911][T25588] __msan_chain_origin+0x50/0x90 [ 1238.019835][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.024926][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.029862][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.034366][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.039022][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.045066][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.051197][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.056397][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.061243][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.065737][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.072039][T25588] [ 1238.074361][T25588] Uninit was stored to memory at: [ 1238.079385][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.085108][T25588] __msan_chain_origin+0x50/0x90 [ 1238.090041][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.095155][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.100132][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.104632][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.109314][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.115378][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.121531][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.126712][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.131575][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.136085][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.142406][T25588] [ 1238.144730][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1238.151391][T25588] do_recvmmsg+0xbf/0x22c0 [ 1238.155793][T25588] do_recvmmsg+0xbf/0x22c0 [ 1238.340998][T25588] not chained 280000 origins [ 1238.350158][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1238.358838][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1238.368896][T25588] Call Trace: [ 1238.372203][T25588] dump_stack+0x21c/0x280 [ 1238.376650][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1238.382369][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1238.387669][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1238.393242][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1238.399314][T25588] ? _copy_from_user+0x201/0x310 [ 1238.404255][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1238.409463][T25588] __msan_chain_origin+0x50/0x90 [ 1238.414387][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.419488][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.424571][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.429089][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1238.434909][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1238.440090][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1238.445270][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1238.451143][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1238.456336][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1238.461985][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1238.467665][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1238.472765][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1238.477521][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.482201][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.488263][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.494401][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.499599][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.504433][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.508918][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.515253][T25588] RIP: 0023:0xf7f0c549 [ 1238.519326][T25588] Code: Bad RIP value. [ 1238.523386][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1238.531774][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1238.539741][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.547700][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.555670][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1238.563645][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.571602][T25588] Uninit was stored to memory at: [ 1238.576616][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.582312][T25588] __msan_chain_origin+0x50/0x90 [ 1238.587229][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.592341][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.597271][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.601754][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.606450][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.612509][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.618690][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.623888][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.628727][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.633336][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.639666][T25588] [ 1238.641992][T25588] Uninit was stored to memory at: [ 1238.647019][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.652719][T25588] __msan_chain_origin+0x50/0x90 [ 1238.657650][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.662763][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.667697][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.672178][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.676838][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.682886][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.689038][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.694232][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.699070][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.703553][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.709873][T25588] [ 1238.712279][T25588] Uninit was stored to memory at: [ 1238.717288][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.722984][T25588] __msan_chain_origin+0x50/0x90 [ 1238.727900][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.733000][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.738005][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.742487][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.747146][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.753386][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.759546][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.764720][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.769555][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.774049][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.780347][T25588] [ 1238.782651][T25588] Uninit was stored to memory at: [ 1238.787657][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.793364][T25588] __msan_chain_origin+0x50/0x90 [ 1238.798290][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.803398][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.808310][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.812792][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.817446][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.823497][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.829626][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.834802][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.839636][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.844115][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.850429][T25588] [ 1238.852738][T25588] Uninit was stored to memory at: [ 1238.857766][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.863484][T25588] __msan_chain_origin+0x50/0x90 [ 1238.868420][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.873535][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.878465][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.882946][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.887603][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.893650][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.899797][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.904991][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.909835][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.914335][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.920641][T25588] [ 1238.922950][T25588] Uninit was stored to memory at: [ 1238.928074][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1238.933774][T25588] __msan_chain_origin+0x50/0x90 [ 1238.938705][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1238.943930][T25588] get_compat_msghdr+0x108/0x2b0 [ 1238.948853][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1238.953470][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1238.958157][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1238.964239][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1238.970395][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1238.975595][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1238.980432][T25588] do_SYSENTER_32+0x73/0x90 [ 1238.984916][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.991214][T25588] [ 1238.993536][T25588] Uninit was stored to memory at: [ 1238.998545][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.004242][T25588] __msan_chain_origin+0x50/0x90 [ 1239.009218][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.014408][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.019393][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.023876][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.028536][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.034611][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.040767][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.045973][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.050822][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.055307][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.061618][T25588] [ 1239.063940][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1239.070598][T25588] do_recvmmsg+0xbf/0x22c0 [ 1239.075019][T25588] do_recvmmsg+0xbf/0x22c0 [ 1239.264411][T25588] not chained 290000 origins [ 1239.269140][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1239.277814][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.287878][T25588] Call Trace: [ 1239.291192][T25588] dump_stack+0x21c/0x280 [ 1239.295551][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1239.301311][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1239.306525][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1239.312087][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1239.318176][T25588] ? _copy_from_user+0x201/0x310 [ 1239.323144][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1239.328358][T25588] __msan_chain_origin+0x50/0x90 [ 1239.333309][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.338446][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.343422][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.347946][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1239.356552][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1239.361946][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1239.367164][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1239.373072][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1239.378280][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1239.383935][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1239.389206][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1239.393966][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1239.398722][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.403401][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.409453][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.415589][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.420772][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.425631][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.430137][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.436462][T25588] RIP: 0023:0xf7f0c549 [ 1239.440521][T25588] Code: Bad RIP value. [ 1239.444639][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1239.453812][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1239.462184][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.470234][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.478193][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1239.486227][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.494189][T25588] Uninit was stored to memory at: [ 1239.499226][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.504942][T25588] __msan_chain_origin+0x50/0x90 [ 1239.509873][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.514974][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.519892][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.524384][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.529039][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.535083][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.541251][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.546428][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.551342][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.555824][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.562124][T25588] [ 1239.564430][T25588] Uninit was stored to memory at: [ 1239.569434][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.575147][T25588] __msan_chain_origin+0x50/0x90 [ 1239.580091][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.585180][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.590108][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.594691][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.599362][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.605407][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.611542][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.616733][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.621580][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.626075][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.632376][T25588] [ 1239.634684][T25588] Uninit was stored to memory at: [ 1239.639714][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.645420][T25588] __msan_chain_origin+0x50/0x90 [ 1239.650429][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.655521][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.661768][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.666262][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.670922][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.676968][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.683125][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.688571][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.693408][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.698691][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.704998][T25588] [ 1239.707305][T25588] Uninit was stored to memory at: [ 1239.712331][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.718028][T25588] __msan_chain_origin+0x50/0x90 [ 1239.723054][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.728233][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.733152][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.737735][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.742450][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.750024][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.756252][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.761467][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.766379][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.770896][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.777210][T25588] [ 1239.779541][T25588] Uninit was stored to memory at: [ 1239.785529][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.792198][T25588] __msan_chain_origin+0x50/0x90 [ 1239.797112][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.802201][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.807190][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.811740][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.816524][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.823765][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.830442][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.835734][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.840649][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.845388][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.851706][T25588] [ 1239.854024][T25588] Uninit was stored to memory at: [ 1239.859046][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.864747][T25588] __msan_chain_origin+0x50/0x90 [ 1239.869670][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.874758][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.879670][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.884151][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.888826][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.894882][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.901025][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.907393][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.912400][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.917546][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.924586][T25588] [ 1239.926909][T25588] Uninit was stored to memory at: [ 1239.932964][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1239.938676][T25588] __msan_chain_origin+0x50/0x90 [ 1239.943638][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1239.948741][T25588] get_compat_msghdr+0x108/0x2b0 [ 1239.953680][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1239.958210][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1239.963046][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1239.969161][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1239.975321][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1239.980654][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1239.985498][T25588] do_SYSENTER_32+0x73/0x90 [ 1239.990029][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.996352][T25588] [ 1239.998677][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1240.005341][T25588] do_recvmmsg+0xbf/0x22c0 [ 1240.009733][T25588] do_recvmmsg+0xbf/0x22c0 [ 1240.202336][T25588] not chained 300000 origins [ 1240.206976][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1240.215647][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.225704][T25588] Call Trace: [ 1240.229050][T25588] dump_stack+0x21c/0x280 [ 1240.233399][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1240.239148][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1240.244359][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1240.249919][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1240.255999][T25588] ? _copy_from_user+0x201/0x310 [ 1240.260948][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1240.266157][T25588] __msan_chain_origin+0x50/0x90 [ 1240.271145][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.276291][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.281220][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.285734][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1240.291570][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1240.296757][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1240.301959][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1240.307838][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1240.313015][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1240.318629][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1240.323895][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1240.328640][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1240.333401][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.338082][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.344149][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.350299][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.355489][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.360318][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.364802][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.371110][T25588] RIP: 0023:0xf7f0c549 [ 1240.375164][T25588] Code: Bad RIP value. [ 1240.379205][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1240.387592][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1240.395553][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.403515][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.411465][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1240.419417][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.427372][T25588] Uninit was stored to memory at: [ 1240.432380][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1240.438077][T25588] __msan_chain_origin+0x50/0x90 [ 1240.442990][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.448176][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.453100][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.457597][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.462350][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.468421][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.475610][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.480876][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.485745][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.490358][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.497271][T25588] [ 1240.499589][T25588] Uninit was stored to memory at: [ 1240.504609][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1240.510339][T25588] __msan_chain_origin+0x50/0x90 [ 1240.515478][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.520677][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.525619][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.530111][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.535221][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.541280][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.547426][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.552616][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.557461][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.561953][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.568350][T25588] [ 1240.570666][T25588] Uninit was stored to memory at: [ 1240.575690][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1240.581407][T25588] __msan_chain_origin+0x50/0x90 [ 1240.586327][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.591426][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.596515][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.600994][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.605805][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.611899][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.618054][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.623253][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.628086][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.632587][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.638882][T25588] [ 1240.641199][T25588] Uninit was stored to memory at: [ 1240.646293][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1240.652089][T25588] __msan_chain_origin+0x50/0x90 [ 1240.657004][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.662105][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.667040][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.671537][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.676206][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.682265][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.688413][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.693595][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.698879][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.703361][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.709663][T25588] [ 1240.711968][T25588] Uninit was stored to memory at: [ 1240.717014][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1240.722733][T25588] __msan_chain_origin+0x50/0x90 [ 1240.727668][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.732816][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.737825][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.742308][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.746973][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.753142][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.759284][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.764489][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.769318][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.773809][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.780104][T25588] [ 1240.782420][T25588] Uninit was stored to memory at: [ 1240.787423][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1240.793223][T25588] __msan_chain_origin+0x50/0x90 [ 1240.798139][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.803228][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.808688][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.813184][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.817861][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.823927][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.830075][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.835251][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.840078][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.844563][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.850886][T25588] [ 1240.853198][T25588] Uninit was stored to memory at: [ 1240.858202][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1240.863983][T25588] __msan_chain_origin+0x50/0x90 [ 1240.868911][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1240.874007][T25588] get_compat_msghdr+0x108/0x2b0 [ 1240.878929][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1240.883406][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1240.888075][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1240.894117][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1240.900269][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1240.905452][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1240.911157][T25588] do_SYSENTER_32+0x73/0x90 [ 1240.915636][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.923681][T25588] [ 1240.925996][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1240.932648][T25588] do_recvmmsg+0xbf/0x22c0 [ 1240.937048][T25588] do_recvmmsg+0xbf/0x22c0 [ 1241.079111][T25588] not chained 310000 origins [ 1241.083766][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1241.092476][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.102644][T25588] Call Trace: [ 1241.105947][T25588] dump_stack+0x21c/0x280 [ 1241.110299][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1241.116054][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1241.121274][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1241.126835][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1241.132926][T25588] ? _copy_from_user+0x201/0x310 [ 1241.138227][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1241.143434][T25588] __msan_chain_origin+0x50/0x90 [ 1241.148385][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.153518][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.158470][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.162990][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1241.168809][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1241.174018][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1241.179226][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1241.185149][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1241.190358][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1241.196002][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1241.201300][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1241.206071][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1241.210852][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.215567][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.221673][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.228976][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.234211][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.239077][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.243594][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.249934][T25588] RIP: 0023:0xf7f0c549 [ 1241.254000][T25588] Code: Bad RIP value. [ 1241.258063][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1241.266515][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1241.274496][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.282482][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.290553][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1241.299837][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.307832][T25588] Uninit was stored to memory at: [ 1241.312870][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1241.318593][T25588] __msan_chain_origin+0x50/0x90 [ 1241.323545][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.328690][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.333895][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.338401][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.343098][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.349186][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.355465][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.360771][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.365622][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.370105][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.376414][T25588] [ 1241.378723][T25588] Uninit was stored to memory at: [ 1241.383731][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1241.389427][T25588] __msan_chain_origin+0x50/0x90 [ 1241.394430][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.399693][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.404614][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.409093][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.413777][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.419829][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.425983][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.431168][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.436017][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.440521][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.446820][T25588] [ 1241.449128][T25588] Uninit was stored to memory at: [ 1241.454137][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1241.460717][T25588] __msan_chain_origin+0x50/0x90 [ 1241.465754][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.470875][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.475966][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.480481][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.485151][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.491548][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.497679][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.502882][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.507753][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.512242][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.518565][T25588] [ 1241.520885][T25588] Uninit was stored to memory at: [ 1241.525913][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1241.531642][T25588] __msan_chain_origin+0x50/0x90 [ 1241.536589][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.541698][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.546614][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.551119][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.555781][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.561846][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.567976][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.573168][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.578013][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.582495][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.588788][T25588] [ 1241.591106][T25588] Uninit was stored to memory at: [ 1241.596111][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1241.601816][T25588] __msan_chain_origin+0x50/0x90 [ 1241.606743][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.611838][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.616765][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.621247][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.625904][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.631959][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.638119][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.643298][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.648141][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.652636][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.658948][T25588] [ 1241.661253][T25588] Uninit was stored to memory at: [ 1241.666258][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1241.671953][T25588] __msan_chain_origin+0x50/0x90 [ 1241.676896][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.681985][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.686901][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.691382][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.696065][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.702111][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.708242][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.713440][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.718296][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.722795][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.729090][T25588] [ 1241.731403][T25588] Uninit was stored to memory at: [ 1241.736417][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1241.742140][T25588] __msan_chain_origin+0x50/0x90 [ 1241.747067][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1241.752177][T25588] get_compat_msghdr+0x108/0x2b0 [ 1241.757100][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1241.761658][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1241.766425][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1241.772479][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1241.778620][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1241.783800][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1241.788639][T25588] do_SYSENTER_32+0x73/0x90 [ 1241.793138][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.799504][T25588] [ 1241.801814][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1241.808475][T25588] do_recvmmsg+0xbf/0x22c0 [ 1241.812869][T25588] do_recvmmsg+0xbf/0x22c0 [ 1242.008934][T25588] not chained 320000 origins [ 1242.013575][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1242.022240][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.032278][T25588] Call Trace: [ 1242.035592][T25588] dump_stack+0x21c/0x280 [ 1242.039970][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1242.045705][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1242.050922][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1242.056452][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1242.062499][T25588] ? _copy_from_user+0x201/0x310 [ 1242.067418][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1242.072603][T25588] __msan_chain_origin+0x50/0x90 [ 1242.077539][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.082668][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.087592][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.092077][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1242.097866][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1242.103088][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1242.108320][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1242.114212][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1242.119400][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1242.125029][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1242.130317][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1242.135094][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1242.139888][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.144584][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.150642][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.156781][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.161978][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.166829][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.171332][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.177660][T25588] RIP: 0023:0xf7f0c549 [ 1242.181700][T25588] Code: Bad RIP value. [ 1242.185773][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1242.194175][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1242.202130][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.210082][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1242.218034][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1242.226003][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.233989][T25588] Uninit was stored to memory at: [ 1242.239016][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1242.244713][T25588] __msan_chain_origin+0x50/0x90 [ 1242.249631][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.254717][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.259635][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.264113][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.268785][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.274836][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.280975][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.286164][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.291030][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.295517][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.301817][T25588] [ 1242.304121][T25588] Uninit was stored to memory at: [ 1242.310266][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1242.316063][T25588] __msan_chain_origin+0x50/0x90 [ 1242.320984][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.326073][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.331005][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.335485][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.340160][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.346203][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.352337][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.357528][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.362388][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.366896][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.373202][T25588] [ 1242.375520][T25588] Uninit was stored to memory at: [ 1242.380543][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1242.386256][T25588] __msan_chain_origin+0x50/0x90 [ 1242.391197][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.396282][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.401200][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.405682][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.410356][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.416413][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.422564][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.427759][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.432603][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.437099][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.443411][T25588] [ 1242.445731][T25588] Uninit was stored to memory at: [ 1242.450791][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1242.456493][T25588] __msan_chain_origin+0x50/0x90 [ 1242.461458][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.466631][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.471610][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.476200][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.480863][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.486929][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.493137][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.498352][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.503203][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.507703][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.514015][T25588] [ 1242.516320][T25588] Uninit was stored to memory at: [ 1242.521336][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1242.527039][T25588] __msan_chain_origin+0x50/0x90 [ 1242.531965][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.537058][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.541988][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.546473][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.551149][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.557195][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.563337][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.568534][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.573393][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.577904][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.584224][T25588] [ 1242.586575][T25588] Uninit was stored to memory at: [ 1242.591715][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1242.597411][T25588] __msan_chain_origin+0x50/0x90 [ 1242.602416][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.607514][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.612602][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.617086][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.621759][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.627827][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.633991][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.639184][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.644033][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.648517][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.654832][T25588] [ 1242.657134][T25588] Uninit was stored to memory at: [ 1242.662142][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1242.667840][T25588] __msan_chain_origin+0x50/0x90 [ 1242.672757][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1242.677930][T25588] get_compat_msghdr+0x108/0x2b0 [ 1242.682853][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1242.687352][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1242.692015][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1242.698056][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1242.704191][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1242.709392][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1242.714234][T25588] do_SYSENTER_32+0x73/0x90 [ 1242.718728][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.725054][T25588] [ 1242.727362][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1242.734022][T25588] do_recvmmsg+0xbf/0x22c0 [ 1242.738429][T25588] do_recvmmsg+0xbf/0x22c0 [ 1242.932200][T25588] not chained 330000 origins [ 1242.936843][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1242.945516][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.955571][T25588] Call Trace: [ 1242.958875][T25588] dump_stack+0x21c/0x280 [ 1242.963223][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1242.969010][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1242.974239][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1242.979811][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1242.985920][T25588] ? _copy_from_user+0x201/0x310 [ 1242.990870][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1242.996077][T25588] __msan_chain_origin+0x50/0x90 [ 1243.001023][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.006155][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.011109][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.015625][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1243.021448][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.026657][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.031872][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1243.037776][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.042983][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1243.048637][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1243.053910][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1243.058651][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1243.063441][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.068193][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.074255][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.080421][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.085645][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.090476][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.094962][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.101265][T25588] RIP: 0023:0xf7f0c549 [ 1243.105328][T25588] Code: Bad RIP value. [ 1243.109370][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1243.117755][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1243.125836][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.133792][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.141743][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1243.149693][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.157649][T25588] Uninit was stored to memory at: [ 1243.162658][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1243.168353][T25588] __msan_chain_origin+0x50/0x90 [ 1243.173268][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.178357][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.183269][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.187750][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.192429][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.198472][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.204603][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.209780][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.214623][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.219121][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.225424][T25588] [ 1243.227775][T25588] Uninit was stored to memory at: [ 1243.232780][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1243.238490][T25588] __msan_chain_origin+0x50/0x90 [ 1243.243406][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.248505][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.253420][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.257915][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.262583][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.268628][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.274758][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.279933][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.284760][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.289260][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.295570][T25588] [ 1243.297873][T25588] Uninit was stored to memory at: [ 1243.302874][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1243.308574][T25588] __msan_chain_origin+0x50/0x90 [ 1243.313488][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.318622][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.323547][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.328055][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.332714][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.338776][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.344910][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.350102][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.354930][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.359423][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.365736][T25588] [ 1243.368047][T25588] Uninit was stored to memory at: [ 1243.373085][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1243.378780][T25588] __msan_chain_origin+0x50/0x90 [ 1243.383694][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.388785][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.393699][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.398179][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.402847][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.408891][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.415039][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.420213][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.425057][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.429539][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.435834][T25588] [ 1243.438135][T25588] Uninit was stored to memory at: [ 1243.443134][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1243.448829][T25588] __msan_chain_origin+0x50/0x90 [ 1243.453749][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.458836][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.463770][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.468450][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.473204][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.479331][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.485987][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.491262][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.496094][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.500574][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.506870][T25588] [ 1243.509172][T25588] Uninit was stored to memory at: [ 1243.514174][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1243.519878][T25588] __msan_chain_origin+0x50/0x90 [ 1243.524792][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.529883][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.534796][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.539280][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.543943][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.549999][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.556128][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.561326][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.566179][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.570675][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.576971][T25588] [ 1243.579274][T25588] Uninit was stored to memory at: [ 1243.584506][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1243.590202][T25588] __msan_chain_origin+0x50/0x90 [ 1243.595119][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.600550][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.605503][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.610000][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.614660][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.620739][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.627147][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.632327][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1243.637166][T25588] do_SYSENTER_32+0x73/0x90 [ 1243.641657][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.647956][T25588] [ 1243.650262][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1243.656911][T25588] do_recvmmsg+0xbf/0x22c0 [ 1243.661308][T25588] do_recvmmsg+0xbf/0x22c0 [ 1243.843468][T25588] not chained 340000 origins [ 1243.848127][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1243.856796][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1243.866852][T25588] Call Trace: [ 1243.870242][T25588] dump_stack+0x21c/0x280 [ 1243.874583][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1243.880330][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.885532][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1243.891088][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1243.897689][T25588] ? _copy_from_user+0x201/0x310 [ 1243.902645][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.907864][T25588] __msan_chain_origin+0x50/0x90 [ 1243.912833][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1243.917968][T25588] get_compat_msghdr+0x108/0x2b0 [ 1243.923006][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1243.927522][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1243.933350][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.938591][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.943801][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1243.949792][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1243.955010][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1243.960658][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1243.965967][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1243.970739][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1243.975558][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1243.980264][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1243.986356][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1243.992698][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1243.997998][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.002866][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.007434][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.013759][T25588] RIP: 0023:0xf7f0c549 [ 1244.017822][T25588] Code: Bad RIP value. [ 1244.021886][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1244.030331][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1244.038280][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1244.046226][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1244.054303][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1244.062261][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1244.070221][T25588] Uninit was stored to memory at: [ 1244.075231][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.081035][T25588] __msan_chain_origin+0x50/0x90 [ 1244.086086][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.091963][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.096985][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.101903][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.107079][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.113140][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.119279][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.125430][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.130284][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.134766][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.141320][T25588] [ 1244.143631][T25588] Uninit was stored to memory at: [ 1244.148722][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.154417][T25588] __msan_chain_origin+0x50/0x90 [ 1244.159334][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.164431][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.169364][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.173851][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.178509][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.184553][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.190707][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.196068][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.200894][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.205373][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.211669][T25588] [ 1244.214051][T25588] Uninit was stored to memory at: [ 1244.219158][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.224857][T25588] __msan_chain_origin+0x50/0x90 [ 1244.229784][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.235839][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.240758][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.245595][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.250252][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.256294][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.262479][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.267729][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.272619][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.277153][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.283545][T25588] [ 1244.286178][T25588] Uninit was stored to memory at: [ 1244.291307][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.297136][T25588] __msan_chain_origin+0x50/0x90 [ 1244.302062][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.307441][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.312358][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.316945][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.321815][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.328305][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.334459][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.339661][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.344587][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.349087][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.355397][T25588] [ 1244.357771][T25588] Uninit was stored to memory at: [ 1244.363923][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.369625][T25588] __msan_chain_origin+0x50/0x90 [ 1244.374552][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.380000][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.384925][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.389423][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.394107][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.400157][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.406286][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.411462][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.416291][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.420787][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.427689][T25588] [ 1244.430004][T25588] Uninit was stored to memory at: [ 1244.435017][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.440710][T25588] __msan_chain_origin+0x50/0x90 [ 1244.445622][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.450728][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.456334][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.460811][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.465824][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.472328][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.479080][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.484458][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.490261][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.495339][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.502010][T25588] [ 1244.505717][T25588] Uninit was stored to memory at: [ 1244.511605][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.517312][T25588] __msan_chain_origin+0x50/0x90 [ 1244.522237][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.527381][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.532314][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.536796][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.541464][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.547504][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.553648][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.558822][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.563917][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.568408][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.574702][T25588] [ 1244.577008][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1244.584439][T25588] do_recvmmsg+0xbf/0x22c0 [ 1244.588838][T25588] do_recvmmsg+0xbf/0x22c0 [ 1244.721443][T25588] not chained 350000 origins [ 1244.726442][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1244.735547][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.746130][T25588] Call Trace: [ 1244.749442][T25588] dump_stack+0x21c/0x280 [ 1244.753801][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1244.759550][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1244.764758][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1244.770313][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1244.776396][T25588] ? _copy_from_user+0x201/0x310 [ 1244.781365][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1244.786576][T25588] __msan_chain_origin+0x50/0x90 [ 1244.791529][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.796663][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.801727][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.806269][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1244.812096][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1244.817345][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1244.822558][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1244.828470][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1244.833676][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1244.839322][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1244.844703][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1244.849470][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1244.854334][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.859035][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.865118][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.871367][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1244.876581][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1244.881441][T25588] do_SYSENTER_32+0x73/0x90 [ 1244.885956][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.892284][T25588] RIP: 0023:0xf7f0c549 [ 1244.896330][T25588] Code: Bad RIP value. [ 1244.900376][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1244.908807][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1244.916761][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1244.924882][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1244.932897][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1244.940853][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1244.948810][T25588] Uninit was stored to memory at: [ 1244.953819][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1244.959568][T25588] __msan_chain_origin+0x50/0x90 [ 1244.964515][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1244.969601][T25588] get_compat_msghdr+0x108/0x2b0 [ 1244.974515][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1244.979007][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1244.983686][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1244.989727][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1244.995877][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.001053][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.005878][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.010357][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.016667][T25588] [ 1245.018969][T25588] Uninit was stored to memory at: [ 1245.023989][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.029681][T25588] __msan_chain_origin+0x50/0x90 [ 1245.034593][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.039678][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.044591][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.049070][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.053737][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.059783][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.065914][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.071100][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.075935][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.080427][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.087114][T25588] [ 1245.089945][T25588] Uninit was stored to memory at: [ 1245.094957][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.100674][T25588] __msan_chain_origin+0x50/0x90 [ 1245.105592][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.110682][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.115598][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.120091][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.124748][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.131053][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.137198][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.142375][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.147218][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.151714][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.158025][T25588] [ 1245.160329][T25588] Uninit was stored to memory at: [ 1245.165333][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.171032][T25588] __msan_chain_origin+0x50/0x90 [ 1245.175947][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.181051][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.185962][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.190440][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.195098][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.201141][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.207291][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.212476][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.217317][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.221881][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.228193][T25588] [ 1245.230521][T25588] Uninit was stored to memory at: [ 1245.235615][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.241307][T25588] __msan_chain_origin+0x50/0x90 [ 1245.246221][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.251308][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.256237][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.260731][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.265387][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.271444][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.277577][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.282752][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.287579][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.292079][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.298375][T25588] [ 1245.300677][T25588] Uninit was stored to memory at: [ 1245.305694][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.311491][T25588] __msan_chain_origin+0x50/0x90 [ 1245.316435][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.321538][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.326470][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.330950][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.335602][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.341733][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.347956][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.353138][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.357993][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.362516][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.368815][T25588] [ 1245.371120][T25588] Uninit was stored to memory at: [ 1245.376124][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.381822][T25588] __msan_chain_origin+0x50/0x90 [ 1245.386735][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.391824][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.396738][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.401277][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.405946][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.412000][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.418136][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.423389][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.428232][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.432718][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.439062][T25588] [ 1245.441444][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1245.448333][T25588] do_recvmmsg+0xbf/0x22c0 [ 1245.453633][T25588] do_recvmmsg+0xbf/0x22c0 [ 1245.599487][T25588] not chained 360000 origins [ 1245.604129][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1245.612798][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1245.622854][T25588] Call Trace: [ 1245.626162][T25588] dump_stack+0x21c/0x280 [ 1245.630509][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1245.636260][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1245.641470][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1245.647028][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1245.653108][T25588] ? _copy_from_user+0x201/0x310 [ 1245.658063][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1245.663306][T25588] __msan_chain_origin+0x50/0x90 [ 1245.668262][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.673400][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.678382][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.682904][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1245.688726][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1245.693935][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1245.699144][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1245.705484][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1245.710697][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1245.716337][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1245.721724][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1245.726494][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1245.731275][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.735979][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.742069][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.748241][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.753455][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.758318][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.762833][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.769159][T25588] RIP: 0023:0xf7f0c549 [ 1245.773259][T25588] Code: Bad RIP value. [ 1245.777341][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1245.785760][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1245.793833][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1245.801813][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1245.809781][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1245.817759][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1245.825714][T25588] Uninit was stored to memory at: [ 1245.830722][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.836442][T25588] __msan_chain_origin+0x50/0x90 [ 1245.841366][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.846455][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.851368][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.855845][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.860515][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.866575][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.872731][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.877909][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.882739][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.887240][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.893558][T25588] [ 1245.895876][T25588] Uninit was stored to memory at: [ 1245.900885][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.906582][T25588] __msan_chain_origin+0x50/0x90 [ 1245.911513][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.916732][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.921784][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.926365][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1245.931039][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1245.937145][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1245.943341][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1245.948522][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1245.953370][T25588] do_SYSENTER_32+0x73/0x90 [ 1245.957867][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1245.964182][T25588] [ 1245.966490][T25588] Uninit was stored to memory at: [ 1245.971496][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1245.977209][T25588] __msan_chain_origin+0x50/0x90 [ 1245.982192][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1245.987357][T25588] get_compat_msghdr+0x108/0x2b0 [ 1245.992285][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1245.996805][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.001477][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.007536][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.013678][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.018867][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.023697][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.028186][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.034494][T25588] [ 1246.036829][T25588] Uninit was stored to memory at: [ 1246.041848][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.047596][T25588] __msan_chain_origin+0x50/0x90 [ 1246.052632][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.057726][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.062664][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.067153][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.071946][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.078004][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.084454][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.089635][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.094550][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.099277][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.105588][T25588] [ 1246.107901][T25588] Uninit was stored to memory at: [ 1246.112912][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.118625][T25588] __msan_chain_origin+0x50/0x90 [ 1246.123589][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.128686][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.133604][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.138111][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.142781][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.148874][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.155025][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.160221][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.165065][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.169547][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.175843][T25588] [ 1246.178149][T25588] Uninit was stored to memory at: [ 1246.183169][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.188863][T25588] __msan_chain_origin+0x50/0x90 [ 1246.193779][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.198866][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.203782][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.208276][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.212931][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.218991][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.225286][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.230465][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.235388][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.239868][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.246175][T25588] [ 1246.248529][T25588] Uninit was stored to memory at: [ 1246.253659][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.259366][T25588] __msan_chain_origin+0x50/0x90 [ 1246.264288][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.269394][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.274379][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.278868][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.283591][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.289665][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.295820][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.301002][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.305836][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.310321][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.316669][T25588] [ 1246.319011][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1246.325680][T25588] do_recvmmsg+0xbf/0x22c0 [ 1246.330075][T25588] do_recvmmsg+0xbf/0x22c0 [ 1246.490964][T25588] not chained 370000 origins [ 1246.495707][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1246.504490][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.514546][T25588] Call Trace: [ 1246.517855][T25588] dump_stack+0x21c/0x280 [ 1246.522224][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1246.527984][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1246.533280][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1246.538839][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1246.544921][T25588] ? _copy_from_user+0x201/0x310 [ 1246.549884][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1246.555093][T25588] __msan_chain_origin+0x50/0x90 [ 1246.560140][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.565274][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.570233][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.574749][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1246.580578][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1246.585789][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1246.591005][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1246.596920][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1246.602161][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1246.607812][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1246.613118][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1246.617889][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1246.622673][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.627455][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.633513][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.639651][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.644838][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.649668][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.654150][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.660467][T25588] RIP: 0023:0xf7f0c549 [ 1246.666421][T25588] Code: Bad RIP value. [ 1246.670465][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1246.679132][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1246.687117][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1246.695187][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1246.703139][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1246.711089][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1246.719047][T25588] Uninit was stored to memory at: [ 1246.724059][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.729790][T25588] __msan_chain_origin+0x50/0x90 [ 1246.734727][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.739832][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.744756][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.749239][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.753894][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.759962][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.766091][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.771291][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.776141][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.780625][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.786923][T25588] [ 1246.789290][T25588] Uninit was stored to memory at: [ 1246.794312][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.800048][T25588] __msan_chain_origin+0x50/0x90 [ 1246.804996][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.810127][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.815051][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.819550][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.824354][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.830428][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.836565][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.841743][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.846571][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.851068][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.857363][T25588] [ 1246.859669][T25588] Uninit was stored to memory at: [ 1246.864674][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.870369][T25588] __msan_chain_origin+0x50/0x90 [ 1246.875302][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.880411][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.885326][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.889825][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.894501][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.900599][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.906872][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.912068][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.916907][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.921397][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.927693][T25588] [ 1246.930072][T25588] Uninit was stored to memory at: [ 1246.935106][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1246.940813][T25588] __msan_chain_origin+0x50/0x90 [ 1246.945730][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1246.950819][T25588] get_compat_msghdr+0x108/0x2b0 [ 1246.955748][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1246.960240][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1246.964968][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1246.971021][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1246.977196][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1246.982383][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1246.987216][T25588] do_SYSENTER_32+0x73/0x90 [ 1246.991717][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.998030][T25588] [ 1247.000506][T25588] Uninit was stored to memory at: [ 1247.005532][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.011259][T25588] __msan_chain_origin+0x50/0x90 [ 1247.016205][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.021307][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.026223][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.030703][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.035359][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.041429][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.047569][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.052747][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.057590][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.062087][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.068385][T25588] [ 1247.070710][T25588] Uninit was stored to memory at: [ 1247.075735][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.081705][T25588] __msan_chain_origin+0x50/0x90 [ 1247.086633][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.091726][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.096643][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.101126][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.105784][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.111848][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.118029][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.123226][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.128056][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.132538][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.138833][T25588] [ 1247.141140][T25588] Uninit was stored to memory at: [ 1247.146145][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.151843][T25588] __msan_chain_origin+0x50/0x90 [ 1247.156759][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.162004][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.166961][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.171449][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.176108][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.182152][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.188285][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.193461][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.198287][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.202853][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.209161][T25588] [ 1247.211497][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1247.218311][T25588] do_recvmmsg+0xbf/0x22c0 [ 1247.222739][T25588] do_recvmmsg+0xbf/0x22c0 [ 1247.418293][T25588] not chained 380000 origins [ 1247.423037][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1247.431705][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1247.441847][T25588] Call Trace: [ 1247.445151][T25588] dump_stack+0x21c/0x280 [ 1247.449499][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1247.456481][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1247.461783][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1247.467572][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1247.473655][T25588] ? _copy_from_user+0x201/0x310 [ 1247.478632][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1247.484109][T25588] __msan_chain_origin+0x50/0x90 [ 1247.489276][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.494778][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.499875][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.504439][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1247.510440][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1247.515658][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1247.520872][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1247.526770][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1247.532086][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1247.537787][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1247.543070][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1247.547827][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1247.552570][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.557254][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.563324][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.569543][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.574721][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.579580][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.584074][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.590387][T25588] RIP: 0023:0xf7f0c549 [ 1247.594453][T25588] Code: Bad RIP value. [ 1247.598511][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1247.607196][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1247.615253][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1247.623202][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1247.631204][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1247.639176][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1247.647326][T25588] Uninit was stored to memory at: [ 1247.652334][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.658232][T25588] __msan_chain_origin+0x50/0x90 [ 1247.663176][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.668272][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.673282][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.677906][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.682574][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.688955][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.695099][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.700291][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.705126][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.709612][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.715911][T25588] [ 1247.718216][T25588] Uninit was stored to memory at: [ 1247.725827][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.731534][T25588] __msan_chain_origin+0x50/0x90 [ 1247.736450][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.742006][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.747075][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.752096][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.756854][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.764130][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.770274][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.775451][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.780374][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.784854][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.791161][T25588] [ 1247.793485][T25588] Uninit was stored to memory at: [ 1247.798501][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.804362][T25588] __msan_chain_origin+0x50/0x90 [ 1247.809286][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.814387][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.819908][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.825146][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.829812][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.836072][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.844080][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.849960][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.854913][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.859403][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.865807][T25588] [ 1247.868220][T25588] Uninit was stored to memory at: [ 1247.877329][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.883496][T25588] __msan_chain_origin+0x50/0x90 [ 1247.888659][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.894184][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.899098][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.903699][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.908378][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.914618][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.922994][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1247.928204][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1247.933034][T25588] do_SYSENTER_32+0x73/0x90 [ 1247.937556][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.943867][T25588] [ 1247.946183][T25588] Uninit was stored to memory at: [ 1247.952867][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1247.958570][T25588] __msan_chain_origin+0x50/0x90 [ 1247.963667][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1247.968784][T25588] get_compat_msghdr+0x108/0x2b0 [ 1247.973804][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1247.978284][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1247.982945][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1247.989008][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1247.995149][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.000454][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.005293][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.009798][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.016101][T25588] [ 1248.018408][T25588] Uninit was stored to memory at: [ 1248.023412][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.029109][T25588] __msan_chain_origin+0x50/0x90 [ 1248.034028][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.039739][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.044671][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.049298][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.053990][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.060324][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.066518][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.072969][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.077829][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.082586][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.089048][T25588] [ 1248.091361][T25588] Uninit was stored to memory at: [ 1248.096484][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.102312][T25588] __msan_chain_origin+0x50/0x90 [ 1248.108282][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.113373][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.118326][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.122805][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.127462][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.133521][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.139824][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.145464][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.150323][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.155379][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.162332][T25588] [ 1248.164657][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1248.171366][T25588] do_recvmmsg+0xbf/0x22c0 [ 1248.175884][T25588] do_recvmmsg+0xbf/0x22c0 [ 1248.350170][T25588] not chained 390000 origins [ 1248.354836][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1248.363509][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.373563][T25588] Call Trace: [ 1248.376866][T25588] dump_stack+0x21c/0x280 [ 1248.381212][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1248.386960][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1248.392163][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1248.397752][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1248.403863][T25588] ? _copy_from_user+0x201/0x310 [ 1248.408814][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1248.414052][T25588] __msan_chain_origin+0x50/0x90 [ 1248.419005][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.424138][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.429091][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.433607][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1248.439431][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1248.444641][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1248.449853][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1248.455760][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1248.460984][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1248.467525][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1248.472923][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1248.477790][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1248.482568][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.487536][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.493625][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.499913][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.505100][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.510480][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.514965][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.521285][T25588] RIP: 0023:0xf7f0c549 [ 1248.525326][T25588] Code: Bad RIP value. [ 1248.529379][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1248.537778][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1248.545736][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1248.553745][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1248.561747][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1248.569698][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1248.577703][T25588] Uninit was stored to memory at: [ 1248.582724][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.588436][T25588] __msan_chain_origin+0x50/0x90 [ 1248.593349][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.598434][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.603360][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.607849][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.612600][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.618643][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.624797][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.630135][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.634970][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.639452][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.645763][T25588] [ 1248.648066][T25588] Uninit was stored to memory at: [ 1248.653078][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.658799][T25588] __msan_chain_origin+0x50/0x90 [ 1248.663902][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.668995][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.673913][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.678403][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.683075][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.689264][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.695442][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.700653][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.705562][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.710061][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.716357][T25588] [ 1248.718667][T25588] Uninit was stored to memory at: [ 1248.723946][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.729729][T25588] __msan_chain_origin+0x50/0x90 [ 1248.734650][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.739738][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.744654][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.749132][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.753791][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.759839][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.766079][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.771258][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.776104][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.780598][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.786982][T25588] [ 1248.789289][T25588] Uninit was stored to memory at: [ 1248.794294][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.800172][T25588] __msan_chain_origin+0x50/0x90 [ 1248.805110][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.810214][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.815161][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.819749][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.824409][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.830473][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.836622][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.841807][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.846642][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.851147][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.857444][T25588] [ 1248.859765][T25588] Uninit was stored to memory at: [ 1248.865307][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.871012][T25588] __msan_chain_origin+0x50/0x90 [ 1248.875929][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.881019][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.885950][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.890431][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.895100][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.901149][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.907281][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.912458][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.917284][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.921786][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.928091][T25588] [ 1248.930419][T25588] Uninit was stored to memory at: [ 1248.935439][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1248.941139][T25588] __msan_chain_origin+0x50/0x90 [ 1248.946055][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1248.951164][T25588] get_compat_msghdr+0x108/0x2b0 [ 1248.956078][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1248.960559][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1248.965248][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1248.971308][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1248.977439][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1248.982619][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1248.987536][T25588] do_SYSENTER_32+0x73/0x90 [ 1248.992020][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.998316][T25588] [ 1249.000625][T25588] Uninit was stored to memory at: [ 1249.005795][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.011605][T25588] __msan_chain_origin+0x50/0x90 [ 1249.016526][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.021616][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.026546][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.031026][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.035769][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.041832][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.047984][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.053169][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.058002][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.062483][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.068778][T25588] [ 1249.071093][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1249.077770][T25588] do_recvmmsg+0xbf/0x22c0 [ 1249.082185][T25588] do_recvmmsg+0xbf/0x22c0 [ 1249.258249][T25588] not chained 400000 origins [ 1249.262900][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1249.271571][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.281633][T25588] Call Trace: [ 1249.284944][T25588] dump_stack+0x21c/0x280 [ 1249.289300][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1249.295149][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1249.300360][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1249.305928][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1249.312017][T25588] ? _copy_from_user+0x201/0x310 [ 1249.316974][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1249.322254][T25588] __msan_chain_origin+0x50/0x90 [ 1249.327208][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.332406][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.337365][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.341891][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1249.348712][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1249.353932][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1249.359157][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1249.365154][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1249.370363][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1249.376008][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1249.381315][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1249.386099][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1249.390878][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.395550][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.401623][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.407758][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.412939][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.417787][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.422288][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.428591][T25588] RIP: 0023:0xf7f0c549 [ 1249.432630][T25588] Code: Bad RIP value. [ 1249.436671][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1249.445073][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1249.453034][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1249.461160][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1249.469116][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1249.477662][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1249.485640][T25588] Uninit was stored to memory at: [ 1249.490899][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.496606][T25588] __msan_chain_origin+0x50/0x90 [ 1249.501558][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.506649][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.511563][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.516045][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.520721][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.526765][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.533070][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.538279][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.543107][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.547589][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.553884][T25588] [ 1249.556279][T25588] Uninit was stored to memory at: [ 1249.561284][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.566995][T25588] __msan_chain_origin+0x50/0x90 [ 1249.571910][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.577013][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.581928][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.586412][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.591080][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.597125][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.603312][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.608498][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.613352][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.617838][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.624152][T25588] [ 1249.626479][T25588] Uninit was stored to memory at: [ 1249.631498][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.637372][T25588] __msan_chain_origin+0x50/0x90 [ 1249.642426][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.647574][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.652514][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.657029][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.661702][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.667834][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.673965][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.679252][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.684092][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.688594][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.695181][T25588] [ 1249.697508][T25588] Uninit was stored to memory at: [ 1249.702542][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.708258][T25588] __msan_chain_origin+0x50/0x90 [ 1249.713179][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.718284][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.723384][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.728047][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.732725][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.739064][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.746867][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.752045][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.756873][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.761365][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.767674][T25588] [ 1249.769999][T25588] Uninit was stored to memory at: [ 1249.775030][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.780780][T25588] __msan_chain_origin+0x50/0x90 [ 1249.785707][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.790798][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.795721][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.800202][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.804859][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.810902][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.817036][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.822212][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.827044][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.831539][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.837850][T25588] [ 1249.840155][T25588] Uninit was stored to memory at: [ 1249.845158][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.850865][T25588] __msan_chain_origin+0x50/0x90 [ 1249.855778][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.860868][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.865780][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.870257][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.874925][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.880983][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.887116][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.892292][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.897119][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.901599][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.907908][T25588] [ 1249.910211][T25588] Uninit was stored to memory at: [ 1249.915212][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1249.920925][T25588] __msan_chain_origin+0x50/0x90 [ 1249.925856][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1249.930944][T25588] get_compat_msghdr+0x108/0x2b0 [ 1249.935856][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1249.940356][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1249.945011][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1249.951058][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1249.957211][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1249.962409][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1249.967243][T25588] do_SYSENTER_32+0x73/0x90 [ 1249.972121][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.978421][T25588] [ 1249.980726][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1249.987506][T25588] do_recvmmsg+0xbf/0x22c0 [ 1249.991916][T25588] do_recvmmsg+0xbf/0x22c0 [ 1250.175433][T25588] not chained 410000 origins [ 1250.180080][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1250.188749][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.198805][T25588] Call Trace: [ 1250.202110][T25588] dump_stack+0x21c/0x280 [ 1250.206458][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1250.212212][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1250.217431][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1250.222989][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1250.229065][T25588] ? _copy_from_user+0x201/0x310 [ 1250.234102][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1250.239304][T25588] __msan_chain_origin+0x50/0x90 [ 1250.244254][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.249385][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.254341][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.258860][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1250.264684][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1250.269895][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1250.275109][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1250.281009][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1250.286207][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1250.291820][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1250.297245][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1250.301992][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1250.306743][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.311469][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.317567][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.323705][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.328884][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.333715][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.338215][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.344604][T25588] RIP: 0023:0xf7f0c549 [ 1250.348673][T25588] Code: Bad RIP value. [ 1250.352730][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1250.361118][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1250.369070][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1250.377030][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1250.385050][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1250.393009][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.401012][T25588] Uninit was stored to memory at: [ 1250.406042][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1250.411745][T25588] __msan_chain_origin+0x50/0x90 [ 1250.416658][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.421745][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.426658][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.431153][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.435808][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.441930][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.448092][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.453275][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.458125][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.462754][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.469169][T25588] [ 1250.471486][T25588] Uninit was stored to memory at: [ 1250.476507][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1250.482221][T25588] __msan_chain_origin+0x50/0x90 [ 1250.487186][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.492286][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.497231][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.501731][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.506401][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.512458][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.518681][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.523968][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.528807][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.533294][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.539608][T25588] [ 1250.541933][T25588] Uninit was stored to memory at: [ 1250.546937][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1250.552635][T25588] __msan_chain_origin+0x50/0x90 [ 1250.557578][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.562706][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.567653][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.572164][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.576829][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.583761][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.589901][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.595076][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.599904][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.607164][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.613471][T25588] [ 1250.615785][T25588] Uninit was stored to memory at: [ 1250.620832][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1250.626543][T25588] __msan_chain_origin+0x50/0x90 [ 1250.631461][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.636550][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.641467][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.645949][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.650605][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.656665][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.662802][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.668000][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.673094][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.677616][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.683924][T25588] [ 1250.686238][T25588] Uninit was stored to memory at: [ 1250.691249][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1250.696972][T25588] __msan_chain_origin+0x50/0x90 [ 1250.701889][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.706978][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.711893][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.716372][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.721061][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.727116][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.733264][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.738449][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.743282][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.747886][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.754189][T25588] [ 1250.756496][T25588] Uninit was stored to memory at: [ 1250.761506][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1250.767221][T25588] __msan_chain_origin+0x50/0x90 [ 1250.772177][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.777283][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.782203][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.786688][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.791491][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.797545][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.803683][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.808890][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.813732][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.818231][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.824555][T25588] [ 1250.826887][T25588] Uninit was stored to memory at: [ 1250.831914][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1250.837616][T25588] __msan_chain_origin+0x50/0x90 [ 1250.842532][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1250.847636][T25588] get_compat_msghdr+0x108/0x2b0 [ 1250.852571][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1250.857052][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1250.861726][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1250.867787][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1250.873921][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1250.879097][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1250.883936][T25588] do_SYSENTER_32+0x73/0x90 [ 1250.888438][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.894810][T25588] [ 1250.897122][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1250.903797][T25588] do_recvmmsg+0xbf/0x22c0 [ 1250.908282][T25588] do_recvmmsg+0xbf/0x22c0 [ 1251.114892][T25588] not chained 420000 origins [ 1251.119547][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1251.128311][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1251.138376][T25588] Call Trace: [ 1251.141689][T25588] dump_stack+0x21c/0x280 [ 1251.146034][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1251.151781][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1251.156990][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1251.162557][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1251.168640][T25588] ? _copy_from_user+0x201/0x310 [ 1251.173597][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1251.178809][T25588] __msan_chain_origin+0x50/0x90 [ 1251.183756][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.188891][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.193988][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.198513][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1251.204339][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1251.209565][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1251.214785][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1251.220685][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1251.225863][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1251.231476][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1251.236760][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1251.241499][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1251.246243][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.250924][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.256974][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.263107][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.268300][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.273149][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.277642][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.284050][T25588] RIP: 0023:0xf7f0c549 [ 1251.288094][T25588] Code: Bad RIP value. [ 1251.292139][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1251.300529][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1251.308485][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1251.316433][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1251.324379][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1251.332328][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1251.340300][T25588] Uninit was stored to memory at: [ 1251.345838][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1251.351596][T25588] __msan_chain_origin+0x50/0x90 [ 1251.356535][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.361627][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.366559][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.371078][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.375758][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.381856][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.387997][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.393180][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.398031][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.402528][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.408826][T25588] [ 1251.411138][T25588] Uninit was stored to memory at: [ 1251.416173][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1251.421886][T25588] __msan_chain_origin+0x50/0x90 [ 1251.426806][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.432036][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.436958][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.441444][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.446103][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.452166][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.458317][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.463695][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.468549][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.473135][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.479436][T25588] [ 1251.482358][T25588] Uninit was stored to memory at: [ 1251.487530][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1251.493242][T25588] __msan_chain_origin+0x50/0x90 [ 1251.498357][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.503451][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.508375][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.512957][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.517707][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.523767][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.529909][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.535092][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.539941][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.544425][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.550737][T25588] [ 1251.553044][T25588] Uninit was stored to memory at: [ 1251.558047][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1251.563769][T25588] __msan_chain_origin+0x50/0x90 [ 1251.568693][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.573796][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.578728][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.583222][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.587894][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.593940][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.600070][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.605245][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.610087][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.614582][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.621519][T25588] [ 1251.623864][T25588] Uninit was stored to memory at: [ 1251.628875][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1251.634577][T25588] __msan_chain_origin+0x50/0x90 [ 1251.639497][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.644592][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.649507][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.654002][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.658656][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.664700][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.670851][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.676025][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.680852][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.685332][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.691627][T25588] [ 1251.693942][T25588] Uninit was stored to memory at: [ 1251.698947][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1251.704642][T25588] __msan_chain_origin+0x50/0x90 [ 1251.709624][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.714839][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.719773][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.724307][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.729012][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.735071][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.741293][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.746511][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.751348][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.755836][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.762149][T25588] [ 1251.764472][T25588] Uninit was stored to memory at: [ 1251.769500][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1251.775202][T25588] __msan_chain_origin+0x50/0x90 [ 1251.780122][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1251.785241][T25588] get_compat_msghdr+0x108/0x2b0 [ 1251.790156][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1251.794727][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1251.799383][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1251.805447][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1251.811608][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1251.816793][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1251.821619][T25588] do_SYSENTER_32+0x73/0x90 [ 1251.826102][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.832415][T25588] [ 1251.834751][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1251.841400][T25588] do_recvmmsg+0xbf/0x22c0 [ 1251.845791][T25588] do_recvmmsg+0xbf/0x22c0 [ 1252.020219][T25588] not chained 430000 origins [ 1252.024861][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1252.033535][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.043595][T25588] Call Trace: [ 1252.046924][T25588] dump_stack+0x21c/0x280 [ 1252.051267][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1252.057014][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1252.062229][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1252.067790][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1252.073903][T25588] ? _copy_from_user+0x201/0x310 [ 1252.079034][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1252.084241][T25588] __msan_chain_origin+0x50/0x90 [ 1252.089190][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.094335][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.099300][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.103908][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1252.109737][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1252.114952][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1252.120167][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1252.126074][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1252.131291][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1252.136948][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1252.142247][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1252.147018][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1252.151793][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.156492][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.162570][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.168770][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.174024][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.178865][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.183361][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.189691][T25588] RIP: 0023:0xf7f0c549 [ 1252.193865][T25588] Code: Bad RIP value. [ 1252.197913][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1252.206308][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1252.214264][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1252.222213][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1252.230178][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1252.238127][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1252.246085][T25588] Uninit was stored to memory at: [ 1252.251095][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1252.256876][T25588] __msan_chain_origin+0x50/0x90 [ 1252.261806][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.266892][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.271807][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.276285][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.280960][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.287004][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.293136][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.298314][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.303140][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.307621][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.313918][T25588] [ 1252.316249][T25588] Uninit was stored to memory at: [ 1252.321267][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1252.326965][T25588] __msan_chain_origin+0x50/0x90 [ 1252.331879][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.336969][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.341882][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.346625][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.351284][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.357341][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.363489][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.368694][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.373528][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.378012][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.384326][T25588] [ 1252.386629][T25588] Uninit was stored to memory at: [ 1252.391662][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1252.397359][T25588] __msan_chain_origin+0x50/0x90 [ 1252.402276][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.407380][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.412308][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.416787][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.421455][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.427517][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.433646][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.438822][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.443649][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.448563][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.454869][T25588] [ 1252.457362][T25588] Uninit was stored to memory at: [ 1252.462514][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1252.468229][T25588] __msan_chain_origin+0x50/0x90 [ 1252.473312][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.478420][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.483341][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.487825][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.492525][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.498604][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.504755][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.509951][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.514796][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.519285][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.525602][T25588] [ 1252.527939][T25588] Uninit was stored to memory at: [ 1252.532961][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1252.538657][T25588] __msan_chain_origin+0x50/0x90 [ 1252.543592][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.548698][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.553611][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.558089][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.562744][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.568787][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.574918][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.580107][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.584949][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.589560][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.596032][T25588] [ 1252.598369][T25588] Uninit was stored to memory at: [ 1252.603399][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1252.609113][T25588] __msan_chain_origin+0x50/0x90 [ 1252.614052][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.619143][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.624062][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.628540][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.633211][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.639256][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.645386][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.650561][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.655408][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.659911][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.666206][T25588] [ 1252.668507][T25588] Uninit was stored to memory at: [ 1252.673509][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1252.679222][T25588] __msan_chain_origin+0x50/0x90 [ 1252.684135][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1252.689224][T25588] get_compat_msghdr+0x108/0x2b0 [ 1252.694135][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1252.698643][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1252.703320][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1252.709364][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1252.715493][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1252.720667][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1252.725492][T25588] do_SYSENTER_32+0x73/0x90 [ 1252.729972][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.736269][T25588] [ 1252.738575][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1252.745223][T25588] do_recvmmsg+0xbf/0x22c0 [ 1252.749632][T25588] do_recvmmsg+0xbf/0x22c0 [ 1252.933018][T25588] not chained 440000 origins [ 1252.937661][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1252.946334][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.956390][T25588] Call Trace: [ 1252.959694][T25588] dump_stack+0x21c/0x280 [ 1252.964039][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1252.969786][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1252.974992][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1252.980545][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1252.986629][T25588] ? _copy_from_user+0x201/0x310 [ 1252.991748][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1252.996951][T25588] __msan_chain_origin+0x50/0x90 [ 1253.001901][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.007035][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.011986][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.016504][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1253.022325][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.027540][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.032752][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1253.038655][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.043847][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1253.049460][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1253.054735][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1253.059480][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1253.064222][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.068888][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.076813][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.083063][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.088249][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.093086][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.097574][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.103880][T25588] RIP: 0023:0xf7f0c549 [ 1253.107923][T25588] Code: Bad RIP value. [ 1253.112037][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1253.120439][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1253.128505][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1253.136547][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1253.144499][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1253.152450][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1253.160406][T25588] Uninit was stored to memory at: [ 1253.165429][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1253.171125][T25588] __msan_chain_origin+0x50/0x90 [ 1253.176124][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.181246][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.186181][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.190662][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.195340][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.201475][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.207644][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.212827][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.217659][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.222167][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.228515][T25588] [ 1253.230825][T25588] Uninit was stored to memory at: [ 1253.235835][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1253.241531][T25588] __msan_chain_origin+0x50/0x90 [ 1253.246461][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.251555][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.256471][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.260948][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.265603][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.271666][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.277820][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.283017][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.287843][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.292342][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.298637][T25588] [ 1253.300941][T25588] Uninit was stored to memory at: [ 1253.305956][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1253.311659][T25588] __msan_chain_origin+0x50/0x90 [ 1253.316579][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.321767][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.326819][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.331312][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.335996][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.342073][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.349480][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.354680][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.359513][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.364016][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.370400][T25588] [ 1253.372848][T25588] Uninit was stored to memory at: [ 1253.377880][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1253.383712][T25588] __msan_chain_origin+0x50/0x90 [ 1253.388635][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.393853][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.398780][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.403266][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.407924][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.413971][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.420101][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.425278][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.430112][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.434594][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.440907][T25588] [ 1253.443212][T25588] Uninit was stored to memory at: [ 1253.448232][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1253.453931][T25588] __msan_chain_origin+0x50/0x90 [ 1253.459163][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.464287][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.469223][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.473726][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.478422][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.484509][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.490671][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.495865][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.500709][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.505190][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.511492][T25588] [ 1253.513855][T25588] Uninit was stored to memory at: [ 1253.518871][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1253.524573][T25588] __msan_chain_origin+0x50/0x90 [ 1253.529506][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.534621][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.539601][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.544091][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.548791][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.554915][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.561079][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.566299][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.571131][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.575632][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.581930][T25588] [ 1253.584233][T25588] Uninit was stored to memory at: [ 1253.589581][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1253.595292][T25588] __msan_chain_origin+0x50/0x90 [ 1253.600208][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.605311][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.610222][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.614721][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.619394][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.625460][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.631595][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.636772][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.641607][T25588] do_SYSENTER_32+0x73/0x90 [ 1253.646126][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.654940][T25588] [ 1253.657252][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1253.663908][T25588] do_recvmmsg+0xbf/0x22c0 [ 1253.668298][T25588] do_recvmmsg+0xbf/0x22c0 [ 1253.839799][T25588] not chained 450000 origins [ 1253.844447][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1253.853122][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1253.863180][T25588] Call Trace: [ 1253.866494][T25588] dump_stack+0x21c/0x280 [ 1253.870845][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1253.876960][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.882170][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1253.887818][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1253.893897][T25588] ? _copy_from_user+0x201/0x310 [ 1253.898858][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.904078][T25588] __msan_chain_origin+0x50/0x90 [ 1253.909030][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1253.914170][T25588] get_compat_msghdr+0x108/0x2b0 [ 1253.919150][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1253.923730][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1253.929565][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.934779][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.939995][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1253.945910][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1253.951124][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1253.956797][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1253.962124][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1253.966906][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1253.971684][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1253.976393][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1253.982761][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1253.988948][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1253.994131][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1253.998988][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.003475][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.009805][T25588] RIP: 0023:0xf7f0c549 [ 1254.013884][T25588] Code: Bad RIP value. [ 1254.017933][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1254.026331][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1254.034295][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1254.042243][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1254.050195][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1254.058151][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1254.066108][T25588] Uninit was stored to memory at: [ 1254.071121][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1254.076820][T25588] __msan_chain_origin+0x50/0x90 [ 1254.081734][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.086835][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.093249][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.097728][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.102385][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.108452][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.114599][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.119787][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.124621][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.129125][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.135421][T25588] [ 1254.137742][T25588] Uninit was stored to memory at: [ 1254.142763][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1254.148475][T25588] __msan_chain_origin+0x50/0x90 [ 1254.153393][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.158492][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.163424][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.167958][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.172616][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.178660][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.185942][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.191138][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.195979][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.200468][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.206779][T25588] [ 1254.209082][T25588] Uninit was stored to memory at: [ 1254.214105][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1254.219799][T25588] __msan_chain_origin+0x50/0x90 [ 1254.224718][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.229915][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.234832][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.239316][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.244114][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.250571][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.256708][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.261890][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.266728][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.271224][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.277530][T25588] [ 1254.279844][T25588] Uninit was stored to memory at: [ 1254.285033][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1254.290746][T25588] __msan_chain_origin+0x50/0x90 [ 1254.295733][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.300945][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.305887][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.310372][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.315029][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.321075][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.327230][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.332406][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.337232][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.341714][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.348010][T25588] [ 1254.350312][T25588] Uninit was stored to memory at: [ 1254.355317][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1254.361129][T25588] __msan_chain_origin+0x50/0x90 [ 1254.366042][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.371144][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.376067][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.380578][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.385255][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.391317][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.397451][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.402653][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.407487][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.411984][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.418295][T25588] [ 1254.420597][T25588] Uninit was stored to memory at: [ 1254.425600][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1254.431312][T25588] __msan_chain_origin+0x50/0x90 [ 1254.436226][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.441314][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.446225][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.450716][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.455396][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.461546][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.467815][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.473137][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.477988][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.482492][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.488804][T25588] [ 1254.491119][T25588] Uninit was stored to memory at: [ 1254.496133][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1254.502022][T25588] __msan_chain_origin+0x50/0x90 [ 1254.506942][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.512036][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.516951][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.521431][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.526091][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.532136][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.538283][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.543546][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.548374][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.552855][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.559152][T25588] [ 1254.561475][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1254.568244][T25588] do_recvmmsg+0xbf/0x22c0 [ 1254.572646][T25588] do_recvmmsg+0xbf/0x22c0 [ 1254.810749][T25588] not chained 460000 origins [ 1254.815392][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1254.824070][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.834128][T25588] Call Trace: [ 1254.837434][T25588] dump_stack+0x21c/0x280 [ 1254.841780][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1254.847544][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1254.852839][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1254.858395][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1254.864526][T25588] ? _copy_from_user+0x201/0x310 [ 1254.869488][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1254.874696][T25588] __msan_chain_origin+0x50/0x90 [ 1254.879650][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1254.884791][T25588] get_compat_msghdr+0x108/0x2b0 [ 1254.889930][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1254.894461][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1254.900288][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1254.905499][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1254.910711][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1254.916613][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1254.921829][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1254.927481][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1254.932805][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1254.937589][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1254.942384][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1254.947190][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1254.953264][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1254.959441][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1254.964678][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1254.969528][T25588] do_SYSENTER_32+0x73/0x90 [ 1254.974055][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.980402][T25588] RIP: 0023:0xf7f0c549 [ 1254.984444][T25588] Code: Bad RIP value. [ 1254.988489][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1254.996875][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1255.004830][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1255.012781][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.020730][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1255.028679][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1255.036648][T25588] Uninit was stored to memory at: [ 1255.041750][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.047446][T25588] __msan_chain_origin+0x50/0x90 [ 1255.052384][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.057474][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.062394][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.067023][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.071698][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.077754][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.083893][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.089071][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.093975][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.098496][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.104799][T25588] [ 1255.107117][T25588] Uninit was stored to memory at: [ 1255.112413][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.118118][T25588] __msan_chain_origin+0x50/0x90 [ 1255.125159][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.130250][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.135188][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.139677][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.144338][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.150564][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.156697][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.161889][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.166787][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.171276][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.177589][T25588] [ 1255.179966][T25588] Uninit was stored to memory at: [ 1255.184993][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.190815][T25588] __msan_chain_origin+0x50/0x90 [ 1255.195890][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.200985][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.205922][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.210403][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.215091][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.221145][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.227295][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.232570][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.237422][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.241947][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.248244][T25588] [ 1255.250551][T25588] Uninit was stored to memory at: [ 1255.255556][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.261259][T25588] __msan_chain_origin+0x50/0x90 [ 1255.266185][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.271406][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.276349][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.280844][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.285511][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.291571][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.297791][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.302990][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.307818][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.312301][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.318602][T25588] [ 1255.320907][T25588] Uninit was stored to memory at: [ 1255.325912][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.331622][T25588] __msan_chain_origin+0x50/0x90 [ 1255.336571][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.341666][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.346587][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.351172][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.355826][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.361887][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.368019][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.373194][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.378022][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.382520][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.388933][T25588] [ 1255.391242][T25588] Uninit was stored to memory at: [ 1255.396272][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.402002][T25588] __msan_chain_origin+0x50/0x90 [ 1255.406936][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.412555][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.417503][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.422009][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.426668][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.432712][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.438864][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.444064][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.448898][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.453384][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.459691][T25588] [ 1255.462013][T25588] Uninit was stored to memory at: [ 1255.467159][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.472859][T25588] __msan_chain_origin+0x50/0x90 [ 1255.478227][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.483437][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.488611][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.493143][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.497808][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.503857][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.509988][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.515164][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.520002][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.524483][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.531770][T25588] [ 1255.534074][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1255.540726][T25588] do_recvmmsg+0xbf/0x22c0 [ 1255.545116][T25588] do_recvmmsg+0xbf/0x22c0 [ 1255.706965][T25588] not chained 470000 origins [ 1255.711608][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1255.720287][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.730346][T25588] Call Trace: [ 1255.733661][T25588] dump_stack+0x21c/0x280 [ 1255.738005][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1255.743760][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1255.748985][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1255.754543][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1255.760633][T25588] ? _copy_from_user+0x201/0x310 [ 1255.765580][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1255.770822][T25588] __msan_chain_origin+0x50/0x90 [ 1255.775772][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.783169][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.788129][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.792647][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1255.798470][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1255.803681][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1255.808894][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1255.814806][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1255.820037][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1255.825681][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1255.830972][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1255.835738][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1255.840513][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.845211][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.851326][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.857530][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.862755][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.867617][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.872135][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.878482][T25588] RIP: 0023:0xf7f0c549 [ 1255.882553][T25588] Code: Bad RIP value. [ 1255.886626][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1255.895046][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1255.903025][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1255.911040][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.919024][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1255.927107][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1255.935299][T25588] Uninit was stored to memory at: [ 1255.940324][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1255.946037][T25588] __msan_chain_origin+0x50/0x90 [ 1255.950957][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1255.956055][T25588] get_compat_msghdr+0x108/0x2b0 [ 1255.963083][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1255.967593][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1255.972263][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1255.978441][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1255.984582][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1255.989757][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1255.994610][T25588] do_SYSENTER_32+0x73/0x90 [ 1255.999110][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.005500][T25588] [ 1256.007818][T25588] Uninit was stored to memory at: [ 1256.012826][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.018538][T25588] __msan_chain_origin+0x50/0x90 [ 1256.024008][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.029205][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.034147][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.038638][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.043313][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.049374][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.055522][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.060696][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.065545][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.070030][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.076340][T25588] [ 1256.078647][T25588] Uninit was stored to memory at: [ 1256.083669][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.089562][T25588] __msan_chain_origin+0x50/0x90 [ 1256.094564][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.099800][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.105459][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.109960][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.114620][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.120769][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.127011][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.132213][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.137042][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.141633][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.148019][T25588] [ 1256.150324][T25588] Uninit was stored to memory at: [ 1256.155351][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.161048][T25588] __msan_chain_origin+0x50/0x90 [ 1256.165969][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.171058][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.175972][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.180450][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.185113][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.191158][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.197419][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.202624][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.207545][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.212063][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.218375][T25588] [ 1256.220685][T25588] Uninit was stored to memory at: [ 1256.225708][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.231418][T25588] __msan_chain_origin+0x50/0x90 [ 1256.236366][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.241544][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.246722][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.251204][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.255948][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.261989][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.268141][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.273332][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.278195][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.282683][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.288990][T25588] [ 1256.291385][T25588] Uninit was stored to memory at: [ 1256.296411][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.302115][T25588] __msan_chain_origin+0x50/0x90 [ 1256.307040][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.312130][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.317058][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.321570][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.326260][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.332348][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.338502][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.343693][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.348540][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.353058][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.359442][T25588] [ 1256.361758][T25588] Uninit was stored to memory at: [ 1256.366910][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.372613][T25588] __msan_chain_origin+0x50/0x90 [ 1256.377548][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.382646][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.387568][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.392049][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.396708][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.402788][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.408926][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.414109][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.418936][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.423416][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.429714][T25588] [ 1256.432021][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1256.438693][T25588] do_recvmmsg+0xbf/0x22c0 [ 1256.443104][T25588] do_recvmmsg+0xbf/0x22c0 [ 1256.630876][T25588] not chained 480000 origins [ 1256.635503][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1256.644171][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.654232][T25588] Call Trace: [ 1256.657553][T25588] dump_stack+0x21c/0x280 [ 1256.661908][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1256.667668][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1256.672887][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1256.678448][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1256.684533][T25588] ? _copy_from_user+0x201/0x310 [ 1256.689487][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1256.694696][T25588] __msan_chain_origin+0x50/0x90 [ 1256.699735][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.704848][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.709798][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.714323][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1256.720114][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1256.725293][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1256.730508][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1256.736398][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1256.741588][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1256.747217][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1256.752514][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1256.757271][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1256.762013][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.766695][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.772760][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.778897][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.784079][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.788928][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.793426][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.799760][T25588] RIP: 0023:0xf7f0c549 [ 1256.803805][T25588] Code: Bad RIP value. [ 1256.807863][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1256.816282][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1256.824375][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1256.832346][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1256.840322][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1256.848308][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1256.856278][T25588] Uninit was stored to memory at: [ 1256.861355][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.867093][T25588] __msan_chain_origin+0x50/0x90 [ 1256.872050][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.877170][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.882115][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.886719][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.891405][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.897486][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.903640][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.908832][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.913690][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.918196][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.924668][T25588] [ 1256.927003][T25588] Uninit was stored to memory at: [ 1256.932190][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1256.937905][T25588] __msan_chain_origin+0x50/0x90 [ 1256.942839][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1256.947944][T25588] get_compat_msghdr+0x108/0x2b0 [ 1256.952874][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1256.957376][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1256.962037][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1256.968183][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1256.974339][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1256.979529][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1256.984531][T25588] do_SYSENTER_32+0x73/0x90 [ 1256.989188][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.995636][T25588] [ 1256.998041][T25588] Uninit was stored to memory at: [ 1257.003065][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.008778][T25588] __msan_chain_origin+0x50/0x90 [ 1257.013801][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.018902][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.023830][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.028321][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.033010][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.039079][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.045243][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.050422][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.055265][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.059786][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.066114][T25588] [ 1257.068420][T25588] Uninit was stored to memory at: [ 1257.073434][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.079154][T25588] __msan_chain_origin+0x50/0x90 [ 1257.086078][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.091431][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.096380][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.100877][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.105550][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.111774][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.118037][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.123418][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.128349][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.133109][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.139887][T25588] [ 1257.142305][T25588] Uninit was stored to memory at: [ 1257.147490][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.153752][T25588] __msan_chain_origin+0x50/0x90 [ 1257.158691][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.163788][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.168702][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.173387][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.178042][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.184196][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.191018][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.196221][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.201326][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.205816][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.212284][T25588] [ 1257.215139][T25588] Uninit was stored to memory at: [ 1257.220208][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.226578][T25588] __msan_chain_origin+0x50/0x90 [ 1257.231695][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.237149][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.242078][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.246631][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.251352][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.257939][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.264093][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.269285][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.274130][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.278611][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.284925][T25588] [ 1257.287228][T25588] Uninit was stored to memory at: [ 1257.292347][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.298054][T25588] __msan_chain_origin+0x50/0x90 [ 1257.303234][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.308411][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.313436][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.318246][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.323479][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.329646][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.335990][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.341626][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.346613][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.351175][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.357492][T25588] [ 1257.359815][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1257.366584][T25588] do_recvmmsg+0xbf/0x22c0 [ 1257.371009][T25588] do_recvmmsg+0xbf/0x22c0 [ 1257.611024][T25588] not chained 490000 origins [ 1257.615658][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1257.624434][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.635454][T25588] Call Trace: [ 1257.638732][T25588] dump_stack+0x21c/0x280 [ 1257.643043][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1257.648787][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1257.654067][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1257.659591][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1257.665734][T25588] ? _copy_from_user+0x201/0x310 [ 1257.670664][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1257.675848][T25588] __msan_chain_origin+0x50/0x90 [ 1257.680776][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.685959][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.690974][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.695468][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1257.702991][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1257.708168][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1257.713353][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1257.719227][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1257.724404][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1257.730014][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1257.735279][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1257.740019][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1257.745125][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.751397][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.757489][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.763994][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.769365][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.774348][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.778839][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.785160][T25588] RIP: 0023:0xf7f0c549 [ 1257.789197][T25588] Code: Bad RIP value. [ 1257.793235][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1257.801735][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1257.809737][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1257.817822][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1257.825988][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1257.833945][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1257.841998][T25588] Uninit was stored to memory at: [ 1257.847033][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.852749][T25588] __msan_chain_origin+0x50/0x90 [ 1257.857869][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.862976][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.867903][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.872555][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.877387][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.883444][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.889622][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.895767][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.900613][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.905354][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.911751][T25588] [ 1257.914066][T25588] Uninit was stored to memory at: [ 1257.919116][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.925775][T25588] __msan_chain_origin+0x50/0x90 [ 1257.930702][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1257.935797][T25588] get_compat_msghdr+0x108/0x2b0 [ 1257.940884][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1257.945363][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1257.950017][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1257.956063][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1257.962198][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1257.967377][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1257.972225][T25588] do_SYSENTER_32+0x73/0x90 [ 1257.976708][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1257.983027][T25588] [ 1257.985334][T25588] Uninit was stored to memory at: [ 1257.990341][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1257.996155][T25588] __msan_chain_origin+0x50/0x90 [ 1258.001084][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.006223][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.011141][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.015624][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.020311][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.027663][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.033793][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.039063][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.043912][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.048405][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.054712][T25588] [ 1258.057016][T25588] Uninit was stored to memory at: [ 1258.062637][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1258.068346][T25588] __msan_chain_origin+0x50/0x90 [ 1258.073269][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.078376][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.083299][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.087780][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.092451][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.098513][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.104674][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.109927][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.114770][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.119783][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.126198][T25588] [ 1258.128579][T25588] Uninit was stored to memory at: [ 1258.135353][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1258.141533][T25588] __msan_chain_origin+0x50/0x90 [ 1258.146542][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.151747][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.156798][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.161296][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.165968][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.172128][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.178285][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.183473][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.188312][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.193141][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.199508][T25588] [ 1258.201827][T25588] Uninit was stored to memory at: [ 1258.207011][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1258.212708][T25588] __msan_chain_origin+0x50/0x90 [ 1258.217633][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.222982][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.227991][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.232713][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.237810][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.243872][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.250020][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.255196][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.260038][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.264518][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.271083][T25588] [ 1258.273385][T25588] Uninit was stored to memory at: [ 1258.278407][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1258.284132][T25588] __msan_chain_origin+0x50/0x90 [ 1258.289060][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.294151][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.299084][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.303651][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.308322][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.314481][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.320650][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.326355][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.335114][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.339598][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.346199][T25588] [ 1258.348524][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1258.355195][T25588] do_recvmmsg+0xbf/0x22c0 [ 1258.359594][T25588] do_recvmmsg+0xbf/0x22c0 [ 1258.562687][T25588] not chained 500000 origins [ 1258.567358][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1258.576030][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.586093][T25588] Call Trace: [ 1258.589396][T25588] dump_stack+0x21c/0x280 [ 1258.593740][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1258.599486][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1258.604699][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1258.610258][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1258.616345][T25588] ? _copy_from_user+0x201/0x310 [ 1258.621298][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1258.626502][T25588] __msan_chain_origin+0x50/0x90 [ 1258.631452][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.636674][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.641628][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.646167][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1258.652023][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1258.657234][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1258.662454][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1258.668360][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1258.673569][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1258.679212][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1258.684521][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1258.689294][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1258.694070][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.698769][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.704971][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.711139][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.716354][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.721280][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.725780][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.732090][T25588] RIP: 0023:0xf7f0c549 [ 1258.736144][T25588] Code: Bad RIP value. [ 1258.740200][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1258.748694][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1258.756709][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1258.764664][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1258.772638][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1258.780612][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1258.788584][T25588] Uninit was stored to memory at: [ 1258.793624][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1258.799322][T25588] __msan_chain_origin+0x50/0x90 [ 1258.804245][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.809335][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.814257][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.818745][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.823445][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.829505][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.835739][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.841010][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.845845][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.850342][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.863866][T25588] [ 1258.866197][T25588] Uninit was stored to memory at: [ 1258.871244][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1258.877246][T25588] __msan_chain_origin+0x50/0x90 [ 1258.882177][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.887287][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.892223][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.896883][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.901674][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.907736][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.913895][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.919091][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.923940][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.928426][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1258.934724][T25588] [ 1258.937029][T25588] Uninit was stored to memory at: [ 1258.942172][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1258.947932][T25588] __msan_chain_origin+0x50/0x90 [ 1258.952855][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1258.957945][T25588] get_compat_msghdr+0x108/0x2b0 [ 1258.962870][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1258.967358][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1258.972225][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1258.978292][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1258.984432][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1258.989626][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1258.994465][T25588] do_SYSENTER_32+0x73/0x90 [ 1258.999130][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.005464][T25588] [ 1259.007800][T25588] Uninit was stored to memory at: [ 1259.012841][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1259.018563][T25588] __msan_chain_origin+0x50/0x90 [ 1259.023589][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.028684][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.033603][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.038092][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.042746][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.048827][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.054964][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1259.060156][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1259.064984][T25588] do_SYSENTER_32+0x73/0x90 [ 1259.069480][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.075787][T25588] [ 1259.078127][T25588] Uninit was stored to memory at: [ 1259.083139][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1259.088850][T25588] __msan_chain_origin+0x50/0x90 [ 1259.093784][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.098930][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.103864][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.108365][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.113021][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.119088][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.125232][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1259.130454][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1259.135286][T25588] do_SYSENTER_32+0x73/0x90 [ 1259.139779][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.146095][T25588] [ 1259.148398][T25588] Uninit was stored to memory at: [ 1259.153405][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1259.159123][T25588] __msan_chain_origin+0x50/0x90 [ 1259.164056][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.169157][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.174083][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.178574][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.183245][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.189311][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.195461][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1259.200658][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1259.205486][T25588] do_SYSENTER_32+0x73/0x90 [ 1259.209969][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.216268][T25588] [ 1259.218587][T25588] Uninit was stored to memory at: [ 1259.223608][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1259.229313][T25588] __msan_chain_origin+0x50/0x90 [ 1259.234330][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.239469][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.244388][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.248874][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.253533][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.259584][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.265732][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1259.270923][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1259.275752][T25588] do_SYSENTER_32+0x73/0x90 [ 1259.280249][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.286562][T25588] [ 1259.288868][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1259.295538][T25588] do_recvmmsg+0xbf/0x22c0 [ 1259.300101][T25588] do_recvmmsg+0xbf/0x22c0 [ 1259.574462][T25588] not chained 510000 origins [ 1259.579100][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1259.587768][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.597823][T25588] Call Trace: [ 1259.601118][T25588] dump_stack+0x21c/0x280 [ 1259.605432][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1259.611225][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1259.616422][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1259.622092][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1259.628164][T25588] ? _copy_from_user+0x201/0x310 [ 1259.633209][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1259.638397][T25588] __msan_chain_origin+0x50/0x90 [ 1259.643324][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.649125][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.654065][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.658554][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1259.664380][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1259.670605][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1259.675846][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1259.681738][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1259.686940][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1259.692582][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1259.700797][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1259.705829][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1259.710769][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.715534][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.721588][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.727902][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1259.733193][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1259.738036][T25588] do_SYSENTER_32+0x73/0x90 [ 1259.742916][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.749309][T25588] RIP: 0023:0xf7f0c549 [ 1259.753531][T25588] Code: Bad RIP value. [ 1259.757600][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1259.766021][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1259.773996][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1259.781968][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.790131][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1259.798086][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.806202][T25588] Uninit was stored to memory at: [ 1259.811239][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1259.816950][T25588] __msan_chain_origin+0x50/0x90 [ 1259.825419][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.830669][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.835604][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.840095][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.844770][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.850818][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.856957][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1259.862150][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1259.866990][T25588] do_SYSENTER_32+0x73/0x90 [ 1259.871654][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.877971][T25588] [ 1259.880283][T25588] Uninit was stored to memory at: [ 1259.885324][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1259.891048][T25588] __msan_chain_origin+0x50/0x90 [ 1259.895967][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.901079][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.906012][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.910526][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.915190][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.921283][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.927441][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1259.932633][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1259.937470][T25588] do_SYSENTER_32+0x73/0x90 [ 1259.941965][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.948427][T25588] [ 1259.950935][T25588] Uninit was stored to memory at: [ 1259.956109][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1259.961842][T25588] __msan_chain_origin+0x50/0x90 [ 1259.966774][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1259.971880][T25588] get_compat_msghdr+0x108/0x2b0 [ 1259.976809][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1259.981312][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1259.985983][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1259.992044][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1259.998198][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.003428][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.008272][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.012765][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.019066][T25588] [ 1260.021373][T25588] Uninit was stored to memory at: [ 1260.026397][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.032097][T25588] __msan_chain_origin+0x50/0x90 [ 1260.037016][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.042139][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.047076][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.051563][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.056236][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.062284][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.068416][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.073613][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.078455][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.082965][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.089296][T25588] [ 1260.091618][T25588] Uninit was stored to memory at: [ 1260.096645][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.102408][T25588] __msan_chain_origin+0x50/0x90 [ 1260.107357][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.112567][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.117490][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.122097][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.126820][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.132878][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.139016][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.144196][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.149026][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.153523][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.159939][T25588] [ 1260.162263][T25588] Uninit was stored to memory at: [ 1260.167290][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.173002][T25588] __msan_chain_origin+0x50/0x90 [ 1260.177918][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.183064][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.187997][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.192526][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.197225][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.203285][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.209437][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.214613][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.219441][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.223921][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.230216][T25588] [ 1260.232517][T25588] Uninit was stored to memory at: [ 1260.237539][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.243236][T25588] __msan_chain_origin+0x50/0x90 [ 1260.248176][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.253308][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.258222][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.262713][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.267429][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.273476][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.279705][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.284889][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.289727][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.294273][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.300661][T25588] [ 1260.302971][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1260.309624][T25588] do_recvmmsg+0xbf/0x22c0 [ 1260.314108][T25588] do_recvmmsg+0xbf/0x22c0 [ 1260.452451][T25588] not chained 520000 origins [ 1260.457186][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1260.465876][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.476032][T25588] Call Trace: [ 1260.479605][T25588] dump_stack+0x21c/0x280 [ 1260.483993][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1260.490553][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1260.496299][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1260.501860][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1260.507951][T25588] ? _copy_from_user+0x201/0x310 [ 1260.512913][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1260.518126][T25588] __msan_chain_origin+0x50/0x90 [ 1260.523079][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.528226][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.533180][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.537707][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1260.543530][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1260.548752][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1260.553967][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1260.559893][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1260.565215][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1260.570948][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1260.576249][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1260.581038][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1260.585815][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.590518][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.596614][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.602780][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.607997][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.612860][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.617380][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.623742][T25588] RIP: 0023:0xf7f0c549 [ 1260.627803][T25588] Code: Bad RIP value. [ 1260.631872][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1260.640289][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1260.648267][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1260.656247][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.664226][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1260.672211][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1260.680199][T25588] Uninit was stored to memory at: [ 1260.685243][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.690969][T25588] __msan_chain_origin+0x50/0x90 [ 1260.695916][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.701032][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.706062][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.710574][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.715259][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.721334][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.727498][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.732707][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.737567][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.742081][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.748402][T25588] [ 1260.750726][T25588] Uninit was stored to memory at: [ 1260.755756][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.761479][T25588] __msan_chain_origin+0x50/0x90 [ 1260.766535][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.771705][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.776636][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.781129][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.785786][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.791857][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.798360][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.803579][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.808550][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.813077][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.819381][T25588] [ 1260.821779][T25588] Uninit was stored to memory at: [ 1260.826801][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.832513][T25588] __msan_chain_origin+0x50/0x90 [ 1260.837446][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.842538][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.847482][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.851987][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.856670][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.862734][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.868904][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.874083][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.878913][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.883395][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.889694][T25588] [ 1260.892019][T25588] Uninit was stored to memory at: [ 1260.897042][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.902927][T25588] __msan_chain_origin+0x50/0x90 [ 1260.907867][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.912969][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.918011][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.922533][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.927209][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1260.933345][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1260.939489][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1260.944667][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1260.949501][T25588] do_SYSENTER_32+0x73/0x90 [ 1260.953983][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.960416][T25588] [ 1260.962724][T25588] Uninit was stored to memory at: [ 1260.967776][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1260.973494][T25588] __msan_chain_origin+0x50/0x90 [ 1260.978428][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1260.983530][T25588] get_compat_msghdr+0x108/0x2b0 [ 1260.988457][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1260.993061][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1260.997730][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.003941][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.010115][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.015303][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.020150][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.024631][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.030928][T25588] [ 1261.033232][T25588] Uninit was stored to memory at: [ 1261.038249][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.043959][T25588] __msan_chain_origin+0x50/0x90 [ 1261.048888][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.054048][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.058983][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.063481][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.068164][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.074241][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.080379][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.085555][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.090386][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.094876][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.101180][T25588] [ 1261.103503][T25588] Uninit was stored to memory at: [ 1261.108543][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.114264][T25588] __msan_chain_origin+0x50/0x90 [ 1261.119330][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.124492][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.129433][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.133931][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.138602][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.144693][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.151035][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.156343][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.161566][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.166067][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.172391][T25588] [ 1261.174701][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1261.181359][T25588] do_recvmmsg+0xbf/0x22c0 [ 1261.185778][T25588] do_recvmmsg+0xbf/0x22c0 [ 1261.379194][T25588] not chained 530000 origins [ 1261.383966][T25588] CPU: 0 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1261.392615][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.402832][T25588] Call Trace: [ 1261.406402][T25588] dump_stack+0x21c/0x280 [ 1261.410730][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1261.416470][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1261.421672][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1261.427213][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1261.433267][T25588] ? _copy_from_user+0x201/0x310 [ 1261.438188][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1261.443383][T25588] __msan_chain_origin+0x50/0x90 [ 1261.448377][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.453579][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.458842][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.464153][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1261.470507][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1261.475886][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1261.481676][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1261.487745][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1261.492953][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1261.498570][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1261.503855][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1261.508624][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1261.513386][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.518051][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.524134][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.530291][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.535496][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.540572][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.545076][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.551490][T25588] RIP: 0023:0xf7f0c549 [ 1261.555543][T25588] Code: Bad RIP value. [ 1261.559847][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1261.568257][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1261.576225][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1261.584187][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.592163][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1261.601082][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.610095][T25588] Uninit was stored to memory at: [ 1261.615475][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.621179][T25588] __msan_chain_origin+0x50/0x90 [ 1261.626116][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.631296][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.636211][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.640688][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.645355][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.651426][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.657578][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.662766][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.667625][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.672118][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.678415][T25588] [ 1261.680721][T25588] Uninit was stored to memory at: [ 1261.685733][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.691517][T25588] __msan_chain_origin+0x50/0x90 [ 1261.696448][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.702521][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.707472][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.711999][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.716758][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.722824][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.729273][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.734454][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.739288][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.743804][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.750210][T25588] [ 1261.752515][T25588] Uninit was stored to memory at: [ 1261.757577][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.763414][T25588] __msan_chain_origin+0x50/0x90 [ 1261.768370][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.773577][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.778498][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.782980][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.787665][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.793739][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.799960][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.805233][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.810179][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.814676][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.821090][T25588] [ 1261.823407][T25588] Uninit was stored to memory at: [ 1261.828429][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.834125][T25588] __msan_chain_origin+0x50/0x90 [ 1261.839038][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.844156][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.849359][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.853866][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.858543][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.864607][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.871333][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.876601][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.881444][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.885937][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.892243][T25588] [ 1261.894548][T25588] Uninit was stored to memory at: [ 1261.899553][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.905266][T25588] __msan_chain_origin+0x50/0x90 [ 1261.910212][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.915472][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.920385][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.924892][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.929573][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1261.935638][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1261.941797][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1261.946992][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1261.951831][T25588] do_SYSENTER_32+0x73/0x90 [ 1261.956337][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.962644][T25588] [ 1261.964960][T25588] Uninit was stored to memory at: [ 1261.969981][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1261.975679][T25588] __msan_chain_origin+0x50/0x90 [ 1261.980603][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1261.985704][T25588] get_compat_msghdr+0x108/0x2b0 [ 1261.990633][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1261.995138][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1261.999793][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.009848][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.016184][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.021359][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.026222][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.030738][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.037054][T25588] [ 1262.039387][T25588] Uninit was stored to memory at: [ 1262.044666][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.050716][T25588] __msan_chain_origin+0x50/0x90 [ 1262.056422][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.061511][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.066888][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.071756][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.076414][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.082461][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.088607][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.093808][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.098649][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.103160][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.109552][T25588] [ 1262.111864][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1262.118530][T25588] do_recvmmsg+0xbf/0x22c0 [ 1262.122923][T25588] do_recvmmsg+0xbf/0x22c0 [ 1262.273234][T25588] not chained 540000 origins [ 1262.277874][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1262.286639][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.296699][T25588] Call Trace: [ 1262.300009][T25588] dump_stack+0x21c/0x280 [ 1262.304354][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1262.310105][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1262.315313][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1262.320870][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1262.326957][T25588] ? _copy_from_user+0x201/0x310 [ 1262.331918][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1262.337122][T25588] __msan_chain_origin+0x50/0x90 [ 1262.342076][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.347222][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.352186][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.356707][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1262.362533][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1262.367745][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1262.372955][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1262.378861][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1262.384096][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1262.389739][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1262.395062][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1262.399836][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1262.404612][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.409380][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.415464][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.422064][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.427299][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.432179][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.436694][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.443025][T25588] RIP: 0023:0xf7f0c549 [ 1262.447207][T25588] Code: Bad RIP value. [ 1262.451666][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1262.461120][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1262.469845][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1262.478010][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1262.485998][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1262.494012][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1262.501977][T25588] Uninit was stored to memory at: [ 1262.506989][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.512798][T25588] __msan_chain_origin+0x50/0x90 [ 1262.517753][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.522866][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.527788][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.532282][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.536954][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.543036][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.549307][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.554488][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.559319][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.563802][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.570125][T25588] [ 1262.572436][T25588] Uninit was stored to memory at: [ 1262.577457][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.583323][T25588] __msan_chain_origin+0x50/0x90 [ 1262.588266][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.593368][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.598284][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.602891][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.607569][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.613640][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.619792][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.624980][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.629827][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.634329][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.640628][T25588] [ 1262.642947][T25588] Uninit was stored to memory at: [ 1262.647951][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.653648][T25588] __msan_chain_origin+0x50/0x90 [ 1262.658562][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.663668][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.668580][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.673073][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.677727][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.683772][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.689936][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.695125][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.699971][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.704464][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.710760][T25588] [ 1262.713065][T25588] Uninit was stored to memory at: [ 1262.718081][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.723785][T25588] __msan_chain_origin+0x50/0x90 [ 1262.728732][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.733821][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.738741][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.743220][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.747874][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.753934][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.760079][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.765256][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.770104][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.774588][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.780903][T25588] [ 1262.783642][T25588] Uninit was stored to memory at: [ 1262.788658][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.794355][T25588] __msan_chain_origin+0x50/0x90 [ 1262.801354][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.806445][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.811373][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.815853][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.820510][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.826554][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.832688][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.837862][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.842690][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.847169][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.853463][T25588] [ 1262.855788][T25588] Uninit was stored to memory at: [ 1262.860794][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.866490][T25588] __msan_chain_origin+0x50/0x90 [ 1262.871407][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.876509][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.881451][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.889930][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.894609][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.900664][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.906801][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.911980][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.916820][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.921319][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.927619][T25588] [ 1262.929952][T25588] Uninit was stored to memory at: [ 1262.934963][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1262.940661][T25588] __msan_chain_origin+0x50/0x90 [ 1262.945593][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1262.950693][T25588] get_compat_msghdr+0x108/0x2b0 [ 1262.955612][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1262.960089][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1262.964744][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1262.971414][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1262.977547][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1262.982727][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1262.987556][T25588] do_SYSENTER_32+0x73/0x90 [ 1262.992037][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.998341][T25588] [ 1263.000708][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1263.007375][T25588] do_recvmmsg+0xbf/0x22c0 [ 1263.011898][T25588] do_recvmmsg+0xbf/0x22c0 [ 1263.163688][T25588] not chained 550000 origins [ 1263.168330][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1263.176998][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.187328][T25588] Call Trace: [ 1263.190636][T25588] dump_stack+0x21c/0x280 [ 1263.194995][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1263.200737][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1263.206567][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1263.211846][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1263.217411][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1263.223520][T25588] ? _copy_from_user+0x201/0x310 [ 1263.228472][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1263.234029][T25588] __msan_chain_origin+0x50/0x90 [ 1263.238981][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.244114][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.249067][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.253620][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1263.259447][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1263.264665][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1263.269876][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1263.275783][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1263.281006][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1263.286656][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1263.291954][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1263.296726][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1263.301607][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.306307][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.312392][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.318529][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.324326][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.329165][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.333652][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.339955][T25588] RIP: 0023:0xf7f0c549 [ 1263.343991][T25588] Code: Bad RIP value. [ 1263.348221][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1263.356620][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1263.364571][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1263.372528][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.380481][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1263.388429][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.396561][T25588] Uninit was stored to memory at: [ 1263.401568][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1263.407276][T25588] __msan_chain_origin+0x50/0x90 [ 1263.412224][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.417321][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.422280][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.426767][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.433510][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.439566][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.445974][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.451168][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.456082][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.460571][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.466977][T25588] [ 1263.469294][T25588] Uninit was stored to memory at: [ 1263.475098][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1263.480803][T25588] __msan_chain_origin+0x50/0x90 [ 1263.485723][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.491627][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.496545][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.501026][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.505691][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.511735][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.518645][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.523821][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.528651][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.533131][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.539425][T25588] [ 1263.541744][T25588] Uninit was stored to memory at: [ 1263.546766][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1263.552508][T25588] __msan_chain_origin+0x50/0x90 [ 1263.557433][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.562529][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.567477][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.572050][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.577462][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.583523][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.590337][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.595521][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.600960][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.605456][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.611839][T25588] [ 1263.614293][T25588] Uninit was stored to memory at: [ 1263.619320][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1263.625020][T25588] __msan_chain_origin+0x50/0x90 [ 1263.629937][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.635022][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.640097][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.644625][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.649312][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.655359][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.661500][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.666673][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.671507][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.675988][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.682296][T25588] [ 1263.684597][T25588] Uninit was stored to memory at: [ 1263.689608][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1263.695309][T25588] __msan_chain_origin+0x50/0x90 [ 1263.700235][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.705321][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.710234][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.714711][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.719378][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.725681][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.731822][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.737008][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.741835][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.746317][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.752610][T25588] [ 1263.754913][T25588] Uninit was stored to memory at: [ 1263.759928][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1263.765641][T25588] __msan_chain_origin+0x50/0x90 [ 1263.770567][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.775653][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.780567][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.785049][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.789718][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.795783][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.802706][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.808355][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.813202][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.817688][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.824602][T25588] [ 1263.826917][T25588] Uninit was stored to memory at: [ 1263.831925][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1263.837637][T25588] __msan_chain_origin+0x50/0x90 [ 1263.842669][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1263.847762][T25588] get_compat_msghdr+0x108/0x2b0 [ 1263.852676][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1263.857157][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1263.861815][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1263.867880][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1263.874012][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1263.879186][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1263.884011][T25588] do_SYSENTER_32+0x73/0x90 [ 1263.888598][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.894902][T25588] [ 1263.897257][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1263.904025][T25588] do_recvmmsg+0xbf/0x22c0 [ 1263.908426][T25588] do_recvmmsg+0xbf/0x22c0 [ 1264.042492][T25588] not chained 560000 origins [ 1264.047127][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1264.055795][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.065850][T25588] Call Trace: [ 1264.069160][T25588] dump_stack+0x21c/0x280 [ 1264.073534][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1264.079290][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1264.084503][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1264.090060][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1264.096151][T25588] ? _copy_from_user+0x201/0x310 [ 1264.101101][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1264.106314][T25588] __msan_chain_origin+0x50/0x90 [ 1264.111265][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.116402][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.121362][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.125875][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1264.131691][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1264.136905][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1264.142134][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1264.148042][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1264.153275][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1264.158941][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1264.164323][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1264.169179][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1264.173952][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.178763][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.184849][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.191010][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.196241][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.201273][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.205785][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.212111][T25588] RIP: 0023:0xf7f0c549 [ 1264.216168][T25588] Code: Bad RIP value. [ 1264.220251][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1264.228665][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1264.236819][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1264.244804][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1264.252781][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1264.260770][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1264.268769][T25588] Uninit was stored to memory at: [ 1264.274133][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1264.279883][T25588] __msan_chain_origin+0x50/0x90 [ 1264.284809][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.289935][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.294859][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.299353][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.304012][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.310081][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.316222][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.323830][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.328655][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.333222][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.339534][T25588] [ 1264.341836][T25588] Uninit was stored to memory at: [ 1264.346848][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1264.352542][T25588] __msan_chain_origin+0x50/0x90 [ 1264.357455][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.362541][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.367464][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.371939][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.376596][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.382639][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.388788][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.393969][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.398885][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.403376][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.409694][T25588] [ 1264.412259][T25588] Uninit was stored to memory at: [ 1264.417260][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1264.422953][T25588] __msan_chain_origin+0x50/0x90 [ 1264.427867][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.432964][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.437884][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.443402][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.448062][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.454116][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.462833][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.468855][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.473806][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.478324][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.485496][T25588] [ 1264.488238][T25588] Uninit was stored to memory at: [ 1264.493252][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1264.499472][T25588] __msan_chain_origin+0x50/0x90 [ 1264.504401][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.509502][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.514430][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.518919][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.523581][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.529649][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.535780][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.540954][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.545778][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.550268][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.556571][T25588] [ 1264.558872][T25588] Uninit was stored to memory at: [ 1264.563882][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1264.569587][T25588] __msan_chain_origin+0x50/0x90 [ 1264.574513][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.579606][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.584605][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.589083][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.593867][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.599909][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.606048][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.611233][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.616070][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.620556][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.626849][T25588] [ 1264.629152][T25588] Uninit was stored to memory at: [ 1264.634151][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1264.639861][T25588] __msan_chain_origin+0x50/0x90 [ 1264.644773][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.649860][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.654798][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.659293][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.663966][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.670015][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.676146][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.681327][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.686153][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.690651][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.696946][T25588] [ 1264.699246][T25588] Uninit was stored to memory at: [ 1264.704246][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1264.709941][T25588] __msan_chain_origin+0x50/0x90 [ 1264.715380][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.720465][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.725401][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1264.729881][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1264.734532][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1264.740776][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1264.746907][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1264.752109][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1264.756958][T25588] do_SYSENTER_32+0x73/0x90 [ 1264.761444][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.767827][T25588] [ 1264.770302][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1264.777769][T25588] do_recvmmsg+0xbf/0x22c0 [ 1264.782161][T25588] do_recvmmsg+0xbf/0x22c0 [ 1264.917898][T25588] not chained 570000 origins [ 1264.922624][T25588] CPU: 1 PID: 25588 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1264.932683][T25588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.942740][T25588] Call Trace: [ 1264.946045][T25588] dump_stack+0x21c/0x280 [ 1264.950390][T25588] kmsan_internal_chain_origin+0x6f/0x130 [ 1264.956159][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1264.961370][T25588] ? kmsan_set_origin_checked+0x95/0xf0 [ 1264.966926][T25588] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1264.973009][T25588] ? _copy_from_user+0x201/0x310 [ 1264.977979][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1264.983185][T25588] __msan_chain_origin+0x50/0x90 [ 1264.988140][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1264.993285][T25588] get_compat_msghdr+0x108/0x2b0 [ 1264.998257][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.003037][T25588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1265.008863][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1265.014089][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1265.019307][T25588] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1265.026192][T25588] ? kmsan_get_metadata+0x116/0x180 [ 1265.031407][T25588] ? kmsan_internal_set_origin+0x75/0xb0 [ 1265.037056][T25588] ? __msan_poison_alloca+0xf0/0x120 [ 1265.042354][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1265.047133][T25588] ? __sys_recvmmsg+0xbb/0x610 [ 1265.052006][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.057409][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.063529][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.069794][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.075042][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.080713][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.085233][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.091588][T25588] RIP: 0023:0xf7f0c549 [ 1265.095652][T25588] Code: Bad RIP value. [ 1265.099889][T25588] RSP: 002b:00000000f54e50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1265.108302][T25588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001f4c [ 1265.116261][T25588] RDX: 0000000090bb7b17 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.124215][T25588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.132253][T25588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1265.140378][T25588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.148509][T25588] Uninit was stored to memory at: [ 1265.154411][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1265.160107][T25588] __msan_chain_origin+0x50/0x90 [ 1265.165349][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1265.170578][T25588] get_compat_msghdr+0x108/0x2b0 [ 1265.175508][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.179998][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.184920][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.190968][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.197266][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.202468][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.207309][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.211792][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.218088][T25588] [ 1265.220393][T25588] Uninit was stored to memory at: [ 1265.225417][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1265.231113][T25588] __msan_chain_origin+0x50/0x90 [ 1265.236091][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1265.241192][T25588] get_compat_msghdr+0x108/0x2b0 [ 1265.246116][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.250598][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.255270][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.264269][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.270408][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.275585][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.280419][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.284915][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.291223][T25588] [ 1265.293546][T25588] Uninit was stored to memory at: [ 1265.298578][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1265.304447][T25588] __msan_chain_origin+0x50/0x90 [ 1265.309379][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1265.314552][T25588] get_compat_msghdr+0x108/0x2b0 [ 1265.319483][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.323995][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.328650][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.334695][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.341121][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.346507][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.352206][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.356796][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.363097][T25588] [ 1265.365404][T25588] Uninit was stored to memory at: [ 1265.370410][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1265.376117][T25588] __msan_chain_origin+0x50/0x90 [ 1265.381040][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1265.386130][T25588] get_compat_msghdr+0x108/0x2b0 [ 1265.391043][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.395541][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.400202][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.406246][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.412378][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.417551][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.422378][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.426859][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.433154][T25588] [ 1265.435460][T25588] Uninit was stored to memory at: [ 1265.440486][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1265.446183][T25588] __msan_chain_origin+0x50/0x90 [ 1265.451097][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1265.456184][T25588] get_compat_msghdr+0x108/0x2b0 [ 1265.461114][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.465595][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.470362][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.476445][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.484210][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.489416][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.494273][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.498762][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.505058][T25588] [ 1265.507361][T25588] Uninit was stored to memory at: [ 1265.513408][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1265.519149][T25588] __msan_chain_origin+0x50/0x90 [ 1265.524071][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1265.529227][T25588] get_compat_msghdr+0x108/0x2b0 [ 1265.534183][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.538686][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.543632][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.549688][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.555827][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.561004][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.565830][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.570309][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.576603][T25588] [ 1265.578905][T25588] Uninit was stored to memory at: [ 1265.583923][T25588] kmsan_internal_chain_origin+0xad/0x130 [ 1265.589707][T25588] __msan_chain_origin+0x50/0x90 [ 1265.594620][T25588] __get_compat_msghdr+0x6db/0x9d0 [ 1265.599707][T25588] get_compat_msghdr+0x108/0x2b0 [ 1265.604624][T25588] do_recvmmsg+0xdbb/0x22c0 [ 1265.609125][T25588] __sys_recvmmsg+0x5dd/0x610 [ 1265.613780][T25588] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1265.619829][T25588] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1265.625961][T25588] __do_fast_syscall_32+0x2af/0x480 [ 1265.631149][T25588] do_fast_syscall_32+0x6b/0xd0 [ 1265.635977][T25588] do_SYSENTER_32+0x73/0x90 [ 1265.640469][T25588] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.646780][T25588] [ 1265.649101][T25588] Local variable ----msg_sys@do_recvmmsg created at: [ 1265.655751][T25588] do_recvmmsg+0xbf/0x22c0 [ 1265.660170][T25588] do_recvmmsg+0xbf/0x22c0 14:05:13 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f00000001c0), 0x10) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) inotify_init1(0x0) 14:05:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="00b3"], 0x5a0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="d8e6bcd7fc8ab00f5e4bf4e0f977080b905dee1c1e1c929bc1628a2bbe", 0x1d}], 0x1}}], 0x1, 0x0) 14:05:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x14, r1, 0xcc65bb6e89667b59}, 0x14}}, 0x0) 14:05:13 executing program 2: clock_adjtime(0x0, &(0x7f0000000240)) 14:05:13 executing program 0: unshare(0x40000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) socket$inet_udplite(0x2, 0x2, 0x88) 14:05:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) [ 1265.980404][T25653] IPVS: ftp: loaded support on port[0] = 21 14:05:13 executing program 2: 14:05:13 executing program 5: 14:05:13 executing program 1: [ 1266.605486][T25653] IPVS: ftp: loaded support on port[0] = 21 [ 1266.833455][T17282] tipc: TX() has been purged, node left! 14:05:14 executing program 2: 14:05:14 executing program 4: 14:05:14 executing program 5: 14:05:14 executing program 3: 14:05:14 executing program 1: 14:05:14 executing program 0: 14:05:14 executing program 2: 14:05:14 executing program 5: 14:05:14 executing program 1: 14:05:14 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000100)) 14:05:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200080, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xfe) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r3, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r3, r3, &(0x7f0000000200), 0xaa4) 14:05:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="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", 0x479}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 14:05:15 executing program 5: 14:05:15 executing program 2: 14:05:15 executing program 1: 14:05:16 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r0, 0x0, 0x10, 0x0) 14:05:16 executing program 2: ioctl$CHAR_RAW_PBSZGET(0xffffffffffffffff, 0x80081272, 0x0) 14:05:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5408, 0x0) 14:05:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$TCSETSW(r2, 0x5434, 0x0) 14:05:16 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 14:05:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) 14:05:16 executing program 5: 14:05:16 executing program 2: 14:05:16 executing program 1: 14:05:17 executing program 4: 14:05:17 executing program 0: 14:05:17 executing program 3: 14:05:17 executing program 5: 14:05:17 executing program 2: 14:05:17 executing program 1: 14:05:17 executing program 0: [ 1270.638563][T17282] tipc: TX() has been purged, node left! 14:05:17 executing program 3: 14:05:17 executing program 4: 14:05:18 executing program 5: 14:05:18 executing program 2: 14:05:18 executing program 1: 14:05:18 executing program 3: 14:05:18 executing program 0: 14:05:18 executing program 4: 14:05:18 executing program 1: 14:05:18 executing program 2: 14:05:18 executing program 5: 14:05:18 executing program 3: 14:05:19 executing program 0: 14:05:19 executing program 1: 14:05:19 executing program 4: 14:05:19 executing program 2: 14:05:19 executing program 5: 14:05:19 executing program 3: 14:05:19 executing program 1: 14:05:19 executing program 0: 14:05:19 executing program 4: 14:05:19 executing program 2: 14:05:19 executing program 5: 14:05:20 executing program 3: 14:05:20 executing program 1: 14:05:20 executing program 0: 14:05:20 executing program 4: 14:05:20 executing program 2: 14:05:20 executing program 5: 14:05:20 executing program 3: 14:05:20 executing program 1: 14:05:20 executing program 0: 14:05:21 executing program 5: 14:05:21 executing program 2: 14:05:21 executing program 4: 14:05:21 executing program 3: 14:05:21 executing program 0: 14:05:21 executing program 1: 14:05:21 executing program 5: 14:05:21 executing program 2: 14:05:21 executing program 3: 14:05:21 executing program 4: 14:05:21 executing program 0: 14:05:22 executing program 2: 14:05:22 executing program 5: 14:05:22 executing program 1: 14:05:22 executing program 4: 14:05:22 executing program 3: 14:05:22 executing program 0: 14:05:22 executing program 5: 14:05:22 executing program 2: 14:05:22 executing program 1: 14:05:22 executing program 4: 14:05:22 executing program 3: 14:05:23 executing program 0: 14:05:23 executing program 2: 14:05:23 executing program 5: 14:05:23 executing program 1: 14:05:23 executing program 4: 14:05:23 executing program 3: 14:05:23 executing program 0: 14:05:23 executing program 2: 14:05:23 executing program 1: 14:05:23 executing program 5: 14:05:23 executing program 4: 14:05:24 executing program 3: 14:05:24 executing program 0: 14:05:24 executing program 2: 14:05:24 executing program 5: 14:05:24 executing program 1: 14:05:24 executing program 4: 14:05:24 executing program 3: 14:05:24 executing program 0: 14:05:24 executing program 2: 14:05:24 executing program 5: 14:05:24 executing program 1: 14:05:25 executing program 4: 14:05:25 executing program 0: 14:05:25 executing program 2: 14:05:25 executing program 3: 14:05:25 executing program 1: 14:05:25 executing program 5: 14:05:25 executing program 4: 14:05:25 executing program 0: 14:05:25 executing program 3: 14:05:25 executing program 2: 14:05:26 executing program 1: 14:05:26 executing program 4: 14:05:26 executing program 5: 14:05:26 executing program 3: 14:05:26 executing program 0: 14:05:26 executing program 2: 14:05:26 executing program 1: 14:05:26 executing program 4: 14:05:26 executing program 5: 14:05:26 executing program 0: 14:05:26 executing program 3: 14:05:27 executing program 2: 14:05:27 executing program 1: 14:05:27 executing program 5: 14:05:27 executing program 4: 14:05:27 executing program 0: 14:05:27 executing program 3: 14:05:27 executing program 1: 14:05:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:27 executing program 4: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x86d40) 14:05:27 executing program 5: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x1, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 14:05:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x10) 14:05:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000000c0)=0x10) 14:05:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 14:05:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:28 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c542) 14:05:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="dc"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0x35, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 14:05:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 14:05:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000001280)='asymmetric\x00', &(0x7f00000012c0)={'syz', 0x3}, 0x0, 0x0) [ 1281.563363][ T28] audit: type=1804 audit(1599141928.648:80): pid=25905 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir463838973/syzkaller.K8wMQ3/957/file0" dev="sda1" ino=16032 res=1 14:05:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc0505510, 0x0) 14:05:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 14:05:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) [ 1282.290827][ T28] audit: type=1800 audit(1599141929.362:81): pid=25905 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16032 res=0 14:05:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x2000}}], 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x60400, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000280)="a41ea1be28") lseek(0xffffffffffffffff, 0x5, 0x0) socket(0xf, 0x3, 0xb27) 14:05:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0xf203, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) [ 1282.847914][T25929] new mount options do not match the existing superblock, will be ignored 14:05:30 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10102, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 14:05:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@acquire={0x16c, 0x17, 0xe1769d5752726e0b, 0x0, 0x0, {{@in=@local}, @in6=@loopback, {@in6=@local, @in=@empty}, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@loopback}, 0x0, @in6=@mcast2}]}]}, 0x16c}}, 0x0) [ 1282.955898][T25929] new mount options do not match the existing superblock, will be ignored 14:05:30 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='E'], 0x1c}}, 0x0) 14:05:30 executing program 4: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f00000004c0)='1', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='\x00A6\xa9\xbbc\xb0\xf6\xda\x0e\xba\xe5\x91\x8f\xfb\x8dR\xac\x1f\xe9qB\xc7\x882\xb8\xf9\x1f9\xa7\xd1\xbb|\xceL\x81\xb3n\x0e\xa5\xde\xe1K\xf4\xc8.r\xff(\xcc\a,\n\x91_\xd5\xf0\xfe\xecz\t\xd2\xd0F\xe5\xba\xb9M\xd9\x8cWJ\xbc?\xda\x99\x1c_\xed,\frL\xf7\v\xafG\xa0\xf7\xd2\xdfU:\xf3\xd3\x8f\n\xaf]\xd0\xdd\xaat>\xc3.\x0e`\x85=\xd5#\xe7\x00\xdd\xb8\x9fC\x13?\xe4P\x02z\r\xab\x03\x83\x8460q\xb4\xe6@>\xd9;\"\x0f\xfd\x19\xa4\xb0\xe5z\xb6:P:\xdc\xbcH\xd3rq\xc4%\xe9\xb9\xa6E\xf4\x15\x7f\r\xd2\x1c\xca\xf58\x1e\xc6\xfb\xb5\xbf\xae\x82R=\xbb\xc6t\\%\'GK\x02\x98\xd3\xfe\xceB\'\x9b\xf6\xee\xb8.\xb3\xad\x9d\xbe\xac^E\xec\xbd\x8b_\xe0\xa2h\xa9}\'\xce1') 14:05:30 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x0, 0x0, @loopback, 0x7f}, 0x1c) 14:05:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) dup3(r0, r1, 0x0) 14:05:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0xc4042, 0x0) 14:05:31 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040), 0x0, 0x0) 14:05:31 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 1284.022461][ T28] audit: type=1800 audit(1599141931.582:82): pid=25956 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16047 res=0 14:05:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) dup3(r0, r1, 0x0) 14:05:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4008550d, 0x0) [ 1284.630402][T25964] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 14:05:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x10001) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x1000, 0x1, @loopback, 0x8}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendto$inet6(r1, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "011d00", '\x00', "c28f001e", "00f45000000b00"}, 0x28) 14:05:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="f7", 0xfffffe96}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 14:05:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:05:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) dup3(r0, r1, 0x0) 14:05:34 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 14:05:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 14:05:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 14:05:34 executing program 0: getpid() r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./bus\x00') 14:05:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_msfilter(r2, 0x29, 0x12, 0x0, 0x0) 14:05:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x20, 0x11, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x20}}, 0x0) 14:05:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) getpgid(0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) 14:05:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 14:05:35 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 14:05:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10) 14:05:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:05:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) getpgid(0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) 14:05:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 14:05:37 executing program 4: r0 = socket(0x15, 0x5, 0x0) setsockopt$bt_BT_VOICE(r0, 0x114, 0x7, 0x0, 0x0) 14:05:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = gettid() write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b0304000000004555a763c15ceda0bb3576ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e10913072c8254f745b7d46cedd461a7ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba408ce7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65c6a2b2e441a0e0c44a3d9abeb7d90f000000000e077d0d67096da85a6d22c36fac7505a35892211b5194d55e0ad396b242ac56b00fbd89c9ff98e0fb8058"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:05:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1289.981453][T26033] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1289.999579][T26033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1290.013794][T26033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:05:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0) r2 = gettid() tkill(r2, 0x800000009) 14:05:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RMKDIR(r2, 0x0, 0x0) 14:05:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) 14:05:37 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(0xffffffffffffffff, r0, 0x0) 14:05:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) getpgid(0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) 14:05:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020700002200000000000000000000000200130015000000fa10f47800000000010016004e21000002000b00910f00000300f604000000001b0008"], 0x110}}, 0x0) socket$key(0xf, 0x3, 0x2) 14:05:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:05:40 executing program 4: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0xd) 14:05:40 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(0xffffffffffffffff, r0, 0x0) 14:05:40 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)) 14:05:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) getpgid(0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) 14:05:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="4c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe0c, 0x20c49a, 0x0, 0x27) 14:05:40 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname(r1, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@can={0x1d, r2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="7335d0d4a6dbe527e13c65b188ca", 0xe}, {&(0x7f0000000200)="2c1c6084c74343f0e8d31cca24d92f13", 0x10}], 0x2}, 0x0) 14:05:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) 14:05:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 14:05:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(0xffffffffffffffff, r0, 0x0) 14:05:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 14:05:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:05:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 14:05:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 14:05:44 executing program 3: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) 14:05:44 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000280)="b9ff0300600d698c389e14f008001fffffff00004000632f00007f0000e0ffffffff", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:05:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:45 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r0, 0xf25, 0x0, 0x0, {0x2}, [@HEADER={0x4}]}, 0x18}}, 0x0) 14:05:45 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) recvmsg$can_bcm(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dbb4768b21aeea4"}}, 0x48}}, 0x0) 14:05:45 executing program 1: clone(0x2000000002608100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:05:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:46 executing program 3: r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) dup3(r1, r0, 0x0) [ 1298.708668][T26270] ptrace attach of "/root/syz-executor.1"[26269] was attempted by "/root/syz-executor.1"[26270] [ 1299.942126][T26258] not chained 580000 origins [ 1299.946776][T26258] CPU: 0 PID: 26258 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1299.955448][T26258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.965513][T26258] Call Trace: [ 1299.968822][T26258] dump_stack+0x21c/0x280 [ 1299.973174][T26258] kmsan_internal_chain_origin+0x6f/0x130 [ 1299.978928][T26258] ? ip_do_fragment+0x3b50/0x3b50 [ 1299.983984][T26258] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1299.989808][T26258] ? kmsan_get_metadata+0x116/0x180 [ 1299.995030][T26258] ? kmsan_set_origin_checked+0x95/0xf0 [ 1300.000600][T26258] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1300.006693][T26258] ? _copy_from_user+0x201/0x310 [ 1300.011653][T26258] ? kmsan_get_metadata+0x116/0x180 [ 1300.016952][T26258] __msan_chain_origin+0x50/0x90 [ 1300.021909][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.027068][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.032030][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.036743][T26258] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1300.042648][T26258] ? __msan_poison_alloca+0xf0/0x120 [ 1300.047959][T26258] ? kmsan_copy_to_user+0x81/0x90 [ 1300.053002][T26258] ? _copy_to_user+0x1bf/0x260 [ 1300.057792][T26258] ? put_old_timespec32+0x231/0x2d0 [ 1300.063015][T26258] ? kmsan_get_metadata+0x116/0x180 [ 1300.068233][T26258] ? kmsan_get_metadata+0x116/0x180 [ 1300.073451][T26258] ? kmsan_get_metadata+0x116/0x180 [ 1300.078674][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.084685][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.090258][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.095481][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.100383][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.104908][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.111242][T26258] RIP: 0023:0xf7ff5549 [ 1300.115308][T26258] Code: Bad RIP value. [ 1300.119379][T26258] RSP: 002b:00000000f55ef0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1300.127800][T26258] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200092c0 [ 1300.135781][T26258] RDX: 00000000000004ff RSI: 0000000000000000 RDI: 0000000000000000 [ 1300.143762][T26258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1300.151741][T26258] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1300.159724][T26258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1300.167718][T26258] Uninit was stored to memory at: [ 1300.172763][T26258] kmsan_internal_chain_origin+0xad/0x130 [ 1300.178527][T26258] __msan_chain_origin+0x50/0x90 [ 1300.183486][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.188611][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.193567][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.198257][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.203638][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.209194][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.214407][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.219352][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.223867][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.230188][T26258] [ 1300.232514][T26258] Uninit was stored to memory at: [ 1300.237559][T26258] kmsan_internal_chain_origin+0xad/0x130 [ 1300.243287][T26258] __msan_chain_origin+0x50/0x90 [ 1300.248234][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.253352][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.258292][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.262978][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.268445][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.274012][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.279221][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.284081][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.288596][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.294938][T26258] [ 1300.297268][T26258] Uninit was stored to memory at: [ 1300.302392][T26258] kmsan_internal_chain_origin+0xad/0x130 [ 1300.308119][T26258] __msan_chain_origin+0x50/0x90 [ 1300.313064][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.318189][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.323159][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.327849][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.333236][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.338797][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.344569][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.349430][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.353948][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.360268][T26258] [ 1300.362592][T26258] Uninit was stored to memory at: [ 1300.367628][T26258] kmsan_internal_chain_origin+0xad/0x130 [ 1300.373356][T26258] __msan_chain_origin+0x50/0x90 [ 1300.378303][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.383427][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.388369][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.393053][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.398432][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.403986][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.409192][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.414052][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.418569][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.424888][T26258] [ 1300.427215][T26258] Uninit was stored to memory at: [ 1300.432248][T26258] kmsan_internal_chain_origin+0xad/0x130 [ 1300.437975][T26258] __msan_chain_origin+0x50/0x90 [ 1300.442920][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.448039][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.452990][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.457683][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.463068][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.468627][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.473861][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.478725][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.483253][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.489670][T26258] [ 1300.492007][T26258] Uninit was stored to memory at: [ 1300.497048][T26258] kmsan_internal_chain_origin+0xad/0x130 [ 1300.502777][T26258] __msan_chain_origin+0x50/0x90 [ 1300.507727][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.512848][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.517795][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.522487][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.527872][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.533430][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.538640][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.543504][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.548021][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.554342][T26258] [ 1300.556676][T26258] Uninit was stored to memory at: [ 1300.561717][T26258] kmsan_internal_chain_origin+0xad/0x130 [ 1300.567455][T26258] __msan_chain_origin+0x50/0x90 [ 1300.572493][T26258] __get_compat_msghdr+0x6db/0x9d0 [ 1300.577623][T26258] get_compat_msghdr+0x108/0x2b0 [ 1300.582614][T26258] __sys_sendmmsg+0x755/0xf70 [ 1300.587302][T26258] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1300.592685][T26258] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1300.598252][T26258] __do_fast_syscall_32+0x2af/0x480 [ 1300.603549][T26258] do_fast_syscall_32+0x6b/0xd0 [ 1300.608409][T26258] do_SYSENTER_32+0x73/0x90 [ 1300.612959][T26258] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1300.619279][T26258] [ 1300.621611][T26258] Local variable ----msg_sys@__sys_sendmmsg created at: [ 1300.628556][T26258] __sys_sendmmsg+0xbb/0xf70 [ 1300.633174][T26258] __sys_sendmmsg+0xbb/0xf70 14:05:48 executing program 5: 14:05:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="f3", 0x1}], 0x1}}], 0x1, 0x4044071) 14:05:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x50000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 14:05:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:05:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffd2) write$cgroup_subtree(r2, 0x0, 0x200600) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000fefe2ddc4200000005"]) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) [ 1301.196466][ T28] audit: type=1800 audit(1599141948.623:83): pid=26312 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16160 res=0 14:05:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1301.317642][ T28] audit: type=1800 audit(1599141948.683:84): pid=26308 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="cpuacct.usage_percpu" dev="sda1" ino=16158 res=0 14:05:48 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/11, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x2}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 14:05:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, r1, 0x0) 14:05:48 executing program 4: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9ff9ea5e2e8d5d"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:05:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 14:05:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) dup3(r0, r1, 0x0) 14:05:50 executing program 0: mlockall(0x1) open(0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./bus\x00', 0xad7, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nonuNtail=0,measure,fown', @ANYRESDEC=0x0, @ANYBLOB="479bb665dea6b46a4deeb939bbf62a1b3b507a2e5fa5eb5a59075f647383670796beef4cc34c2a15e3089165979404af4fb03b5a67df072b5a6a08a1ff6be714a84466bf2339"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xca200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 14:05:50 executing program 5: 14:05:50 executing program 4: 14:05:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) dup3(r0, r1, 0x0) 14:05:51 executing program 1: 14:05:51 executing program 4: 14:05:51 executing program 5: 14:05:52 executing program 3: 14:05:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) dup3(r0, r1, 0x0) 14:05:52 executing program 1: 14:05:52 executing program 4: 14:05:52 executing program 5: 14:05:54 executing program 0: 14:05:54 executing program 4: 14:05:54 executing program 5: 14:05:54 executing program 1: 14:05:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0), 0x4) dup3(r0, r1, 0x0) 14:05:54 executing program 3: 14:05:54 executing program 1: 14:05:54 executing program 3: 14:05:54 executing program 4: 14:05:54 executing program 5: 14:05:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0), 0x4) dup3(r0, r1, 0x0) 14:05:54 executing program 0: 14:05:54 executing program 1: 14:05:54 executing program 3: 14:05:55 executing program 5: 14:05:55 executing program 4: 14:05:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0), 0x4) dup3(r0, r1, 0x0) 14:05:55 executing program 0: 14:05:55 executing program 1: 14:05:55 executing program 3: 14:05:55 executing program 5: 14:05:55 executing program 4: 14:05:55 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(0xffffffffffffffff, r0, 0x0) 14:05:55 executing program 0: 14:05:55 executing program 1: 14:05:56 executing program 3: 14:05:56 executing program 5: 14:05:56 executing program 4: 14:05:56 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(0xffffffffffffffff, r0, 0x0) 14:05:56 executing program 1: 14:05:56 executing program 0: 14:05:56 executing program 3: 14:05:56 executing program 5: 14:05:56 executing program 4: 14:05:56 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(0xffffffffffffffff, r0, 0x0) 14:05:56 executing program 1: 14:05:56 executing program 0: 14:05:57 executing program 3: 14:05:57 executing program 5: 14:05:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4138ae84, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0xffffff7f}]}) 14:05:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 14:05:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x5452, 0x7fffffffefff) 14:05:57 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_emit_ethernet(0x86, &(0x7f0000000440)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "74e6a1a4a1a6612709bc91eee952ffe764e756c24684daa0fc323ecabc212d50", "50900c0a5507f8c7e7a8ced382a7d05c", {"76c1a9335f03d4b2e92ad015c0538d43", "eacd3f8969e313e958ac129adbc2eb5a"}}}}}}}, 0x0) 14:05:57 executing program 3: r0 = socket(0x1d, 0x3, 0x1) getsockopt$netrom_NETROM_N2(r0, 0x65, 0x3, 0x0, 0x0) 14:05:57 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f00000032c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@tclass={{0x14, 0x29, 0x2}}], 0x18}}], 0x2, 0x0) 14:05:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 14:05:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) 14:05:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:05:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x32, 0x0, 0x0) 14:05:58 executing program 1: r0 = socket(0x15, 0x5, 0x0) connect$packet(r0, 0x0, 0x0) 14:05:58 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2}, 0x18) 14:05:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x6}, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 14:05:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000100)=[@cr4={0x1, 0x420100}], 0x1) 14:05:58 executing program 4: mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x1010007fffffef) 14:05:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x8208ae63, 0x0) 14:05:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)="495e68ab6cd73daff7031ef0c1bcafb8986684db064855932b20eacc08ec551f6ad740e3fdefa92b75b64492304ef1635261edbaaf8248cc3380bbe7661fb1eb96134aef5888ef1012b4c5d37bc4fa90f0d042d3d059390c09898fe6d030f1c3e4be0ec53754f7c7409cd38c76964eab0f2addad6a5780293463413e2eaa739acacdcbc30faa3ab5a6b521182c06c680", 0x90) 14:05:59 executing program 5: r0 = socket(0x2b, 0x1, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 14:05:59 executing program 2: r0 = socket(0x10, 0x80002, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:05:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x8000000, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) 14:05:59 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, &(0x7f0000000080)=0x1f00) 14:05:59 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x8916, &(0x7f0000000040)) 14:05:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x11, 0x0, &(0x7f0000000080)) 14:05:59 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000200)=ANY=[], 0x40) 14:05:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0189436, 0x0) 14:05:59 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045006, 0x0) 14:06:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) [ 1312.844340][T26507] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) 14:06:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80000) 14:06:00 executing program 0: prctl$PR_GET_PDEATHSIG(0x59616d61, &(0x7f00000004c0)) 14:06:00 executing program 2: r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 14:06:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 14:06:00 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0x18, &(0x7f0000000180)={0x0}}, 0x0) 14:06:00 executing program 3: syz_emit_ethernet(0x14, &(0x7f0000000000)={@empty, @random="0a6c19dec322", @val={@void}, {@generic={0x8864, "d0da"}}}, 0x0) 14:06:00 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$xdp(r0, &(0x7f0000000280), 0x10) 14:06:01 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x109081, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4004510d, &(0x7f0000000240)=@t={0x0, 0x0, 0x0, 0x0, @generic}) 14:06:01 executing program 2: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000340)={'sit0\x00', 0x0}) 14:06:01 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x5460, 0x0) 14:06:01 executing program 5: r0 = socket(0x10, 0x80002, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r1, 0xf07, 0x0, 0x0, {0x2, 0x6}, [@HEADER={0xff7f, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x48}}, 0x0) 14:06:01 executing program 0: r0 = socket(0xa, 0x6, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 14:06:01 executing program 3: 14:06:01 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 14:06:01 executing program 4: fchownat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0xee01, 0xffffffffffffffff, 0x1000) 14:06:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xf, 0x4, 0x4, 0x100000001}, 0x40) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080), 0x0}, 0x20) 14:06:01 executing program 3: r0 = socket(0x15, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000200)={{0x3, @default}, [@default, @default, @null, @default, @default, @default, @bcast, @bcast]}, 0x48) 14:06:01 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0xc0189436, &(0x7f0000000200)={0x0, @adiantum}) 14:06:02 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x4008b100, 0x0) 14:06:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) prctl$PR_SET_SECUREBITS(0x59616d61, 0x0) 14:06:02 executing program 4: mount$9p_fd(0x400000, 0x0, 0x0, 0x0, 0x0) 14:06:02 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) 14:06:02 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000040)) 14:06:02 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="9e", 0x1}], 0x1}], 0x1, 0x0) recvmsg$can_raw(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/76, 0x4c}], 0x1}, 0x0) 14:06:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x0, 0xc000}) 14:06:02 executing program 2: r0 = socket(0x25, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 14:06:02 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x29, 0x17, 0x0, 0x0) 14:06:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000), 0x1) 14:06:03 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$netrom(r0, 0x0, 0x7) 14:06:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x8) 14:06:03 executing program 5: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x21, 0x0, @rand_addr=0x2000004}, 0x80, 0x0}, 0x0) 14:06:03 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f00000006c0)) 14:06:03 executing program 0: r0 = socket(0x15, 0x5, 0x0) setsockopt$bt_BT_VOICE(r0, 0x114, 0x1d, 0x0, 0x0) 14:06:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0000100}]}) 14:06:03 executing program 4: connect$inet(0xffffffffffffffff, 0x0, 0x0) 14:06:03 executing program 3: syz_mount_image$cifs(&(0x7f0000000100)='cifs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x68670933376d6c2d) 14:06:04 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 14:06:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x23, 0x0, 0x0) 14:06:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}}, 0x0) 14:06:04 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x70, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0xee00, 0x0) 14:06:04 executing program 1: r0 = socket(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10d, 0xd, 0x0, 0x0) 14:06:04 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:06:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 14:06:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2275, 0x7fffffffefff) 14:06:04 executing program 0: r0 = socket(0x25, 0x5, 0x0) setsockopt$bt_BT_VOICE(r0, 0x114, 0x2, 0x0, 0x0) 14:06:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0xf, &(0x7f0000000340)={0x0, 0x3, 0x6, @broadcast}, 0x10) 14:06:04 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:06:05 executing program 3: r0 = socket(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, 0x0, 0x0) 14:06:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x21, &(0x7f0000000480)={@multicast2, @local, @loopback}, 0x3) 14:06:05 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x8940, &(0x7f0000000000)) 14:06:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000180)="82", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) 14:06:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)='`', 0x1, 0x9746}, {&(0x7f0000000180)='0', 0x1}], 0x0, 0x0) 14:06:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000380)={'veth0_to_hsr\x00', @ifru_hwaddr=@multicast}) 14:06:05 executing program 3: bpf$MAP_LOOKUP_BATCH(0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x38) 14:06:05 executing program 0: r0 = socket(0x1, 0x3, 0x0) bind$netrom(r0, 0x0, 0x0) 14:06:06 executing program 1: r0 = socket(0x2a, 0x80002, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0, 0xf0ff7f}}, 0x0) 14:06:06 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) 14:06:06 executing program 3: r0 = socket(0x2, 0x5, 0x0) bind(r0, &(0x7f0000000280)=@in={0x2, 0x0, @loopback}, 0x80) 14:06:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @broadcast}]}, &(0x7f0000000140)=0x10) 14:06:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x5, &(0x7f0000001540)=[{&(0x7f0000000180)="e2", 0x1}, {&(0x7f0000000280)="93", 0x1, 0x8000}, {&(0x7f0000000380)="1f", 0x1}, {&(0x7f0000000440)='s', 0x1, 0x9794}, {&(0x7f0000000540)="ff", 0x1}], 0x0, 0x0) 14:06:06 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x3000000b}) 14:06:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = getpid() process_vm_readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000280)=""/99, 0x7ffff000}, {&(0x7f0000000380)=""/142, 0x8e}], 0x2, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/12, 0xc}, {&(0x7f00000019c0)=""/210, 0xd2}, {&(0x7f0000001ac0)=""/31, 0x1f}], 0x3, 0x0) 14:06:06 executing program 2: r0 = socket(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) 14:06:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x3f, 0x20}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) [ 1319.699804][ T28] audit: type=1400 audit(1599141967.096:85): avc: denied { block_suspend } for pid=26667 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 14:06:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2203, 0xa04901) 14:06:07 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x60000041) 14:06:07 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x4, 0x0) 14:06:07 executing program 2: shmctl$IPC_SET(0x0, 0x3, &(0x7f0000000240)={{0x2, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:06:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') read$FUSE(r0, 0x0, 0x0) 14:06:07 executing program 4: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) 14:06:07 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$SIOCGETLINKNAME(r0, 0x80044944, 0x0) 14:06:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 14:06:07 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x29, 0x35, 0x0, 0x0) 14:06:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) 14:06:08 executing program 1: r0 = socket(0x2, 0x3, 0x3) getpeername$qrtr(r0, 0x0, 0x0) 14:06:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf) 14:06:08 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x29, 0x6, 0x0, 0x0) 14:06:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 14:06:08 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_buf(r0, 0x10d, 0x0, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) 14:06:08 executing program 1: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x541b, &(0x7f0000000700)={'ip6gre0\x00', 0x0}) 14:06:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6000}}, 0x14}}, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4138ae84, &(0x7f0000000000)) 14:06:09 executing program 1: prctl$PR_SET_CHILD_SUBREAPER(0x18, 0x0) 14:06:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:06:09 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x70, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x101080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 14:06:09 executing program 5: r0 = socket(0x28, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:06:10 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000080)) 14:06:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x84, 0x21, 0x0, &(0x7f00000019c0)) 14:06:10 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, @in={0x2, 0x0, @broadcast}, @rc={0x1f, @none}, @can, 0xff}) 14:06:10 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 14:06:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000105}]}) 14:06:10 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 14:06:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x19, &(0x7f0000005f40)={'IDLETIMER\x00'}, &(0x7f0000005f80)=0x1e) 14:06:11 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x11, 0x13, 0x0, 0x300) 14:06:11 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40) 14:06:11 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc050565d, 0x0) 14:06:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001180)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}]}, 0x3c}}, 0x0) 14:06:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socket$inet6_dccp(0xa, 0x6, 0x0) 14:06:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}}, 0x0) 14:06:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x4, 0x8, 0x800001}, 0x40) 14:06:12 executing program 1: setuid(0xee01) prctl$PR_SET_MM_AUXV(0x3a, 0xc, 0x0, 0x0) 14:06:12 executing program 4: r0 = socket(0x15, 0x5, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40010141, 0x0, 0x0) 14:06:12 executing program 2: prctl$PR_SET_CHILD_SUBREAPER(0x19, 0x0) 14:06:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x1f]}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000001c0)="030000012c1ad852", 0x5000) 14:06:12 executing program 3: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0xff600000) 14:06:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)) 14:06:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000700)={0x7fffffff}) 14:06:12 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname(r1, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@can={0x1d, r2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="7335d0d4a6dbe527e13c65b18864", 0xe}], 0x1}, 0x0) 14:06:12 executing program 2: r0 = socket(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x13, 0x0, 0x0) 14:06:12 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 14:06:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x40, 0x4) 14:06:13 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)=""/240, 0xf0}], 0x2) 14:06:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x5, 0x80, 0x400}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 14:06:13 executing program 1: getgroups(0x4000027a, &(0x7f0000000080)) 14:06:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x1e, 0x0, &(0x7f0000000080)) 14:06:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x204082, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 14:06:13 executing program 3: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 14:06:13 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x9, &(0x7f0000000000), 0x14) 14:06:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, 0x0) 14:06:14 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000059c0)=[{0x10, 0x110, 0xb}], 0x10}, 0x0) 14:06:14 executing program 2: setrlimit(0x7, &(0x7f0000000200)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) 14:06:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x89f0, 0x0) 14:06:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r0, 0x29, 0x3e, 0x0, &(0x7f0000000080)) 14:06:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x48, 0x0, &(0x7f0000000180)) 14:06:14 executing program 4: set_mempolicy(0x1, &(0x7f0000000080)=0x3, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) 14:06:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 14:06:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:15 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f0000000140)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$CHAR_RAW_PBSZGET(r0, 0x80081270, &(0x7f00000001c0)) 14:06:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x29, 0x1b, 0x0, 0x0) 14:06:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0xfffff001, 0x4) 14:06:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x891c, &(0x7f0000000040)={'syz_tun\x00', @ifru_addrs=@in={0x2, 0x0, @dev}}) 14:06:15 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:06:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{}, {@in=@multicast2}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xf0}}, 0x0) 14:06:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x7fffffffefff) 14:06:15 executing program 0: bpf$MAP_UPDATE_ELEM(0x9, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) 14:06:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r1, 0xb3b5e43e2d665541, 0x0, 0x0, {{}, {}, {0xbe, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 14:06:16 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 14:06:16 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "73010600"}, 0x0, 0x0, @fd}) 14:06:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) [ 1328.975803][T26909] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 14:06:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)) 14:06:16 executing program 0: r0 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_mreq(r0, 0x10d, 0x6, &(0x7f0000000000)={@dev}, 0x14) 14:06:16 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000400)) 14:06:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x8000000007}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 14:06:16 executing program 3: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x5) 14:06:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 14:06:17 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f0000000140)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$CHAR_RAW_PBSZGET(r0, 0x40101283, &(0x7f00000001c0)) 14:06:17 executing program 4: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8971, &(0x7f0000002a40)={'ip6gre0\x00', 0x0}) 14:06:17 executing program 1: syz_mount_image$minix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f00000001c0)={0x20, 0x0, r1}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000004600)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:06:17 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 14:06:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x70bd2c}, 0x14}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4138ae84, &(0x7f0000000140)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000000}]}) 14:06:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:06:18 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0x9, @sliced}) 14:06:18 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0x80045006, 0x0) 14:06:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) 14:06:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:18 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffe42}}, 0x0) 14:06:18 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) 14:06:18 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_emit_ethernet(0x57, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@link_local, @random="77ba2f3aac0f", @val={@void}, {@arp={0x4305, @ether_ipv4={0xf, 0x800, 0x6, 0x4, 0x0, @multicast, @empty, @random="111ad5984365"}}}}, 0x0) 14:06:18 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 14:06:18 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f00000032c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r1, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='m', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0) 14:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, &(0x7f0000000180)) 14:06:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) bind$x25(r0, 0x0, 0x0) 14:06:19 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000011000000000004"], 0x28}}, 0x0) 14:06:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = getpid() ptrace$peeksig(0x4209, r1, 0x0, 0x0) 14:06:19 executing program 4: r0 = socket(0x25, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:06:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) 14:06:19 executing program 5: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 14:06:20 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:20 executing program 4: bpf$MAP_UPDATE_ELEM(0x5, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@tcp6}, 0x20) 14:06:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2271, 0x7fffffffefff) 14:06:20 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) 14:06:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000170105"], 0x44}}, 0x0) 14:06:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000840000000500000030d5"], 0x38}], 0x1, 0x0) 14:06:20 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 14:06:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[{0x10}], 0x10}, 0x0) 14:06:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = gettid() get_robust_list(r1, &(0x7f0000000300)=0x0, &(0x7f0000000340)) 14:06:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), 0xc) 14:06:20 executing program 5: r0 = socket(0x25, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x400c0c5) 14:06:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:21 executing program 4: bpf$BPF_PROG_QUERY(0x15, 0x0, 0x0) 14:06:21 executing program 1: r0 = socket(0x29, 0x5, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) 14:06:21 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x890d, 0x0) 14:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 14:06:21 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x208200, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 14:06:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) write$dsp(r0, &(0x7f00000001c0)="de27e9b034baf571e2109f8c7c4c86bcc357a4d1c2ed09b5e6ca956f994c91687f2b203a018bc57816167b55692a9d5db0b3a05ddca1fd96c97e38fefeb7540eed28c24c0462bec9fd529e7c9ba74ae11d4abe55e2", 0x20000215) 14:06:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000001240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @echo_reply={0x12}}}}, 0x26) 14:06:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000010400001bffffff000000ad58c6", @ANYRES32=r1, @ANYBLOB="00000000001f0c20540012801100010062725aad329d0000000076abf3a188023c0005"], 0x74}, 0x1, 0x88a8ffff}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 14:06:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005380)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) 14:06:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 14:06:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:22 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000003480)="dc", 0x1) read(r0, 0x0, 0x0) 14:06:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') ioctl$VT_ACTIVATE(r0, 0x541b, 0x0) 14:06:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) [ 1335.484063][T27055] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1335.553422][T27069] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 14:06:23 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @multicast, @void}, 0x0) 14:06:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 14:06:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) [ 1336.137029][T27081] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:06:25 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 14:06:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x10, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra}}}}, 0x42) 14:06:25 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14:06:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="f0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 1337.952838][T27106] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:06:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:25 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000026000106"], 0x28}}, 0x0) 14:06:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1}}], 0x500, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="651f35db20909883cd45e1c24168a2aa43eae54979a92cd869b938c1792dd24d0f911d60e296751df6e24cb59df83e08a5a4a4dfabbd5b63f8d70b4b6aea4c835967563e2302809d6c743e9ccbff260c401f704b72b7a952eef00741fc03b8dac20a56d8a97dc3e7acef6b6dc34c0a0d90803b16e734b029", 0x78}, {&(0x7f00000004c0)="26f5449cb962b965b4416f8068c457a3b9f093bf1b468f9003c3471cec6ba49bc41c7072a4ebaaeb9676f784e9d6d7c004590e617c212bdfcd14993dd1dcf8d735ee", 0x42}], 0x2}}], 0x1, 0x0) 14:06:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) [ 1338.824242][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:06:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) [ 1339.025493][T27130] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:06:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:06:27 executing program 4: 14:06:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000840)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "bd416e", 0xc, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 14:06:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x21, 0x0, &(0x7f0000000080)) 14:06:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 14:06:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a80), 0x4) [ 1339.937425][T27150] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:06:27 executing program 0: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:27 executing program 1: 14:06:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:27 executing program 3: 14:06:27 executing program 5: 14:06:27 executing program 4: 14:06:28 executing program 0: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:28 executing program 1: 14:06:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:28 executing program 5: 14:06:28 executing program 3: 14:06:28 executing program 4: 14:06:28 executing program 0: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:28 executing program 1: 14:06:28 executing program 5: 14:06:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000a80), 0x4) 14:06:29 executing program 3: 14:06:29 executing program 4: 14:06:29 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:29 executing program 5: 14:06:29 executing program 1: 14:06:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 14:06:29 executing program 3: 14:06:29 executing program 4: 14:06:29 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:30 executing program 5: 14:06:30 executing program 1: 14:06:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 14:06:30 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000001080101"], 0x44}}, 0x0) 14:06:30 executing program 4: 14:06:30 executing program 3: 14:06:30 executing program 5: 14:06:30 executing program 1: 14:06:31 executing program 4: 14:06:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x2) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 14:06:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) 14:06:31 executing program 3: 14:06:31 executing program 5: 14:06:31 executing program 1: 14:06:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) 14:06:31 executing program 2: 14:06:32 executing program 4: 14:06:32 executing program 3: 14:06:32 executing program 1: 14:06:32 executing program 5: 14:06:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) 14:06:32 executing program 2: 14:06:32 executing program 3: 14:06:32 executing program 4: 14:06:32 executing program 1: 14:06:33 executing program 5: 14:06:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:06:33 executing program 4: 14:06:33 executing program 3: 14:06:33 executing program 1: 14:06:33 executing program 2: 14:06:33 executing program 5: 14:06:33 executing program 4: 14:06:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:06:34 executing program 1: 14:06:34 executing program 3: 14:06:34 executing program 5: 14:06:34 executing program 2: 14:06:34 executing program 4: 14:06:34 executing program 1: 14:06:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:06:34 executing program 3: 14:06:34 executing program 5: 14:06:34 executing program 2: 14:06:35 executing program 4: 14:06:35 executing program 1: 14:06:35 executing program 3: 14:06:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}}, 0x0) 14:06:35 executing program 2: 14:06:35 executing program 5: 14:06:35 executing program 4: 14:06:35 executing program 1: 14:06:35 executing program 3: 14:06:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}}, 0x0) 14:06:35 executing program 2: 14:06:35 executing program 5: 14:06:36 executing program 4: 14:06:36 executing program 1: 14:06:36 executing program 3: 14:06:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}}, 0x0) 14:06:36 executing program 2: 14:06:36 executing program 5: 14:06:36 executing program 4: 14:06:37 executing program 1: 14:06:37 executing program 3: 14:06:37 executing program 2: 14:06:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x0) 14:06:37 executing program 5: 14:06:37 executing program 4: 14:06:37 executing program 1: 14:06:37 executing program 3: 14:06:38 executing program 2: 14:06:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x0) 14:06:38 executing program 5: 14:06:38 executing program 4: 14:06:38 executing program 1: 14:06:38 executing program 3: 14:06:38 executing program 2: 14:06:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x0) 14:06:38 executing program 5: 14:06:39 executing program 4: 14:06:39 executing program 1: 14:06:39 executing program 3: 14:06:39 executing program 2: 14:06:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) 14:06:39 executing program 5: 14:06:39 executing program 4: 14:06:39 executing program 1: 14:06:39 executing program 3: 14:06:39 executing program 2: 14:06:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) 14:06:40 executing program 5: 14:06:40 executing program 4: 14:06:40 executing program 1: 14:06:40 executing program 3: 14:06:40 executing program 2: 14:06:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) 14:06:40 executing program 5: 14:06:40 executing program 4: 14:06:40 executing program 1: 14:06:40 executing program 3: 14:06:41 executing program 5: 14:06:41 executing program 2: 14:06:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x44}}, 0x0) 14:06:41 executing program 1: 14:06:41 executing program 3: 14:06:41 executing program 4: 14:06:41 executing program 2: 14:06:41 executing program 5: 14:06:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x44}}, 0x0) 14:06:42 executing program 3: 14:06:42 executing program 1: 14:06:42 executing program 4: 14:06:42 executing program 2: 14:06:42 executing program 5: 14:06:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x44}}, 0x0) 14:06:42 executing program 3: 14:06:42 executing program 1: 14:06:42 executing program 4: 14:06:42 executing program 2: 14:06:42 executing program 5: 14:06:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000108"], 0x44}}, 0x0) 14:06:43 executing program 3: 14:06:43 executing program 1: 14:06:43 executing program 2: 14:06:43 executing program 4: 14:06:43 executing program 5: 14:06:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000108"], 0x44}}, 0x0) 14:06:43 executing program 3: 14:06:43 executing program 1: 14:06:43 executing program 2: 14:06:43 executing program 4: 14:06:44 executing program 5: 14:06:44 executing program 3: 14:06:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000108"], 0x44}}, 0x0) 14:06:44 executing program 1: 14:06:44 executing program 2: 14:06:44 executing program 4: 14:06:44 executing program 3: 14:06:44 executing program 5: 14:06:44 executing program 1: 14:06:44 executing program 2: 14:06:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000010801"], 0x44}}, 0x0) 14:06:45 executing program 4: 14:06:45 executing program 3: 14:06:45 executing program 5: [ 1357.925470][T27382] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:06:45 executing program 2: 14:06:45 executing program 1: 14:06:45 executing program 4: 14:06:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000010801"], 0x44}}, 0x0) 14:06:45 executing program 3: 14:06:46 executing program 5: 14:06:46 executing program 2: [ 1358.611430][T27390] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:06:46 executing program 1: 14:06:46 executing program 4: 14:06:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000010801"], 0x44}}, 0x0) 14:06:46 executing program 3: 14:06:46 executing program 1: 14:06:46 executing program 5: 14:06:46 executing program 2: [ 1359.761766][T27404] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:06:47 executing program 5: 14:06:47 executing program 3: 14:06:47 executing program 1: 14:06:47 executing program 2: 14:06:47 executing program 4: 14:06:47 executing program 0: 14:06:47 executing program 3: 14:06:48 executing program 1: 14:06:48 executing program 5: 14:06:48 executing program 2: 14:06:48 executing program 0: 14:06:48 executing program 4: 14:06:48 executing program 3: 14:06:48 executing program 2: 14:06:48 executing program 5: 14:06:48 executing program 1: 14:06:48 executing program 0: 14:06:48 executing program 4: 14:06:49 executing program 3: 14:06:49 executing program 5: 14:06:49 executing program 2: 14:06:49 executing program 1: 14:06:49 executing program 0: 14:06:49 executing program 4: 14:06:49 executing program 3: 14:06:49 executing program 5: 14:06:49 executing program 2: 14:06:49 executing program 1: 14:06:49 executing program 0: 14:06:50 executing program 3: 14:06:50 executing program 4: 14:06:50 executing program 2: 14:06:50 executing program 5: 14:06:50 executing program 1: 14:06:50 executing program 0: 14:06:50 executing program 3: 14:06:50 executing program 4: 14:06:50 executing program 2: 14:06:50 executing program 5: 14:06:50 executing program 1: 14:06:51 executing program 0: 14:06:51 executing program 2: 14:06:51 executing program 4: 14:06:51 executing program 3: 14:06:51 executing program 5: 14:06:51 executing program 1: 14:06:51 executing program 0: 14:06:51 executing program 2: 14:06:51 executing program 4: 14:06:52 executing program 3: 14:06:52 executing program 1: 14:06:52 executing program 5: 14:06:52 executing program 0: 14:06:52 executing program 2: 14:06:52 executing program 4: 14:06:52 executing program 3: 14:06:52 executing program 1: 14:06:52 executing program 5: 14:06:52 executing program 0: 14:06:52 executing program 2: 14:06:53 executing program 4: 14:06:53 executing program 1: 14:06:53 executing program 5: 14:06:53 executing program 3: 14:06:53 executing program 0: 14:06:53 executing program 2: 14:06:53 executing program 1: 14:06:53 executing program 5: 14:06:53 executing program 3: 14:06:53 executing program 4: 14:06:53 executing program 0: 14:06:53 executing program 2: 14:06:54 executing program 1: 14:06:54 executing program 5: 14:06:54 executing program 3: 14:06:54 executing program 4: 14:06:54 executing program 0: 14:06:54 executing program 2: 14:06:54 executing program 1: 14:06:54 executing program 5: 14:06:54 executing program 0: 14:06:54 executing program 3: 14:06:55 executing program 4: 14:06:55 executing program 2: 14:06:55 executing program 1: 14:06:55 executing program 5: 14:06:55 executing program 0: 14:06:55 executing program 3: 14:06:55 executing program 4: 14:06:55 executing program 2: 14:06:55 executing program 1: 14:06:55 executing program 5: 14:06:56 executing program 0: 14:06:56 executing program 3: 14:06:56 executing program 4: 14:06:56 executing program 2: 14:06:56 executing program 1: 14:06:56 executing program 5: 14:06:56 executing program 0: 14:06:56 executing program 4: 14:06:56 executing program 3: 14:06:56 executing program 2: 14:06:56 executing program 1: 14:06:56 executing program 5: 14:06:57 executing program 0: 14:06:57 executing program 4: 14:06:57 executing program 3: 14:06:57 executing program 2: 14:06:57 executing program 1: 14:06:57 executing program 5: 14:06:57 executing program 0: 14:06:57 executing program 4: 14:06:57 executing program 3: 14:06:57 executing program 2: 14:06:57 executing program 1: 14:06:58 executing program 5: 14:06:58 executing program 0: 14:06:58 executing program 4: 14:06:58 executing program 3: 14:06:58 executing program 2: 14:06:58 executing program 1: 14:06:58 executing program 5: 14:06:58 executing program 0: 14:06:58 executing program 3: 14:06:58 executing program 4: 14:06:59 executing program 2: 14:06:59 executing program 5: 14:06:59 executing program 1: 14:06:59 executing program 0: 14:06:59 executing program 3: 14:06:59 executing program 4: 14:06:59 executing program 2: 14:06:59 executing program 5: 14:06:59 executing program 1: 14:06:59 executing program 0: 14:07:00 executing program 3: 14:07:00 executing program 4: 14:07:00 executing program 2: 14:07:00 executing program 1: 14:07:00 executing program 5: 14:07:00 executing program 0: 14:07:00 executing program 3: 14:07:00 executing program 2: 14:07:00 executing program 4: 14:07:00 executing program 5: 14:07:00 executing program 1: 14:07:00 executing program 0: 14:07:01 executing program 2: 14:07:01 executing program 3: 14:07:01 executing program 4: 14:07:01 executing program 5: 14:07:01 executing program 1: 14:07:01 executing program 0: 14:07:01 executing program 3: 14:07:01 executing program 2: 14:07:01 executing program 4: 14:07:01 executing program 5: 14:07:02 executing program 1: 14:07:02 executing program 0: 14:07:02 executing program 2: 14:07:02 executing program 3: 14:07:02 executing program 5: 14:07:02 executing program 4: 14:07:02 executing program 1: 14:07:02 executing program 0: 14:07:02 executing program 2: 14:07:02 executing program 3: 14:07:03 executing program 4: 14:07:03 executing program 5: 14:07:03 executing program 1: 14:07:03 executing program 0: 14:07:03 executing program 2: 14:07:03 executing program 3: 14:07:03 executing program 5: 14:07:03 executing program 4: 14:07:03 executing program 1: 14:07:03 executing program 0: 14:07:04 executing program 3: 14:07:04 executing program 2: 14:07:04 executing program 5: 14:07:04 executing program 4: 14:07:04 executing program 1: 14:07:04 executing program 4: 14:07:04 executing program 5: 14:07:05 executing program 3: 14:07:05 executing program 2: 14:07:05 executing program 0: 14:07:05 executing program 3: 14:07:05 executing program 1: 14:07:05 executing program 4: 14:07:05 executing program 5: 14:07:05 executing program 2: 14:07:05 executing program 0: 14:07:05 executing program 4: 14:07:06 executing program 3: 14:07:06 executing program 5: 14:07:06 executing program 1: 14:07:06 executing program 2: 14:07:06 executing program 0: 14:07:06 executing program 4: 14:07:06 executing program 3: 14:07:06 executing program 5: 14:07:06 executing program 1: 14:07:06 executing program 2: 14:07:06 executing program 0: 14:07:07 executing program 3: 14:07:07 executing program 5: 14:07:07 executing program 4: 14:07:07 executing program 0: 14:07:07 executing program 1: 14:07:07 executing program 2: 14:07:07 executing program 3: 14:07:07 executing program 5: 14:07:07 executing program 4: 14:07:07 executing program 0: 14:07:07 executing program 2: 14:07:08 executing program 1: 14:07:08 executing program 3: 14:07:08 executing program 5: 14:07:08 executing program 4: 14:07:08 executing program 0: 14:07:08 executing program 2: 14:07:08 executing program 1: 14:07:08 executing program 3: 14:07:08 executing program 5: 14:07:08 executing program 4: 14:07:09 executing program 0: 14:07:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000085797a3119000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a000000000000000008000000000000000000000000000000000000000000000000000000000016"], 0x12e) 14:07:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80ff0100000000003693e0", 0x1d) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 14:07:09 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') 14:07:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001b80)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', 0x0, 0x2}) [ 1382.036318][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.044138][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.051944][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.059593][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.067349][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.075814][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.083634][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.091451][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.099191][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.107097][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.115109][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.122845][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.130770][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.138415][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.146178][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.153982][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.161700][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.169349][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.177102][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 14:07:09 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) [ 1382.184842][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.192584][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1382.200329][ T8713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 14:07:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x84, 0xd, &(0x7f0000000080)=@fragment={0x2}, 0x8) 14:07:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c03500400000665c0f5d02b9f50404db09fbfb20e035c4e17de74b06650f23f7636569b3ce0fc7735126660f388077694f4f0f5c19db3a9af342d8868680000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x59}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x150003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:07:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x2, 0x1, 0x80b, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 14:07:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f6465762f6c6f6f7030000ce8b362dec8ca4f54d8e07526c0b94c16356d722944cf2a0e1e84eaf758e96e7597008408000000b24aaf3fd17def6163c7988003043a054d0e6a2f7db3dc402fd8023d1b49b684f78bd5819a5a911b90a066f74aeb7ec6fcf7ea968471fd337630e85558fb9d769a53943c39efae2beed9edb4350ead6f1024b8b64adc93ee2116a4231169656da63584c97ec18dd6deacf011a23f626e2c9bebeb5e1b5b63facb88380fa71a4cebdecff6810dc4cc192e8d3f0a7c"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 14:07:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1383.016772][ T8713] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device […yz1] on sz1 [ 1383.141427][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.149714][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.157509][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.165188][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.172975][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.181361][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.189268][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.197287][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.205019][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.212645][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.220453][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.228236][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.236037][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.243722][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.251743][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.259532][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.267326][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.275092][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.282811][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.290580][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.298355][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1383.306815][ T8723] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 14:07:10 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 14:07:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000102000003) [ 1384.051394][ T8723] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device […yz1] on sz1 14:07:11 executing program 2: 14:07:11 executing program 5: 14:07:11 executing program 3: 14:07:11 executing program 0: 14:07:11 executing program 1: 14:07:11 executing program 4: 14:07:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 14:07:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38}, 0x0) 14:07:11 executing program 5: 14:07:12 executing program 3: 14:07:12 executing program 4: 14:07:12 executing program 2: 14:07:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xc000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8"], 0x0) 14:07:12 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) write$dsp(r0, &(0x7f00000000c0)="de", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 14:07:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x1c01) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1}) 14:07:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) readahead(0xffffffffffffffff, 0x0, 0x0) 14:07:13 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}) 14:07:13 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x6000) 14:07:13 executing program 0: 14:07:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff9e, 0x79, 0x1}, 0xffffffffffffffd6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$cont(0x7, 0x0, 0x480000000002, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0x80006) 14:07:13 executing program 1: r0 = socket(0x29, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) 14:07:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x64, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:07:13 executing program 5: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fff, 0x4) [ 1386.574108][ T28] audit: type=1800 audit(1599142033.998:86): pid=27757 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16362 res=0 14:07:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/172, 0xac}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:07:14 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10000, 0x0) read$qrtrtun(r0, &(0x7f0000000140)=""/102388, 0x18ff4) 14:07:14 executing program 4: r0 = socket(0xa, 0x3, 0x6) connect$can_j1939(r0, &(0x7f0000000000)={0xa}, 0x18) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x21}, 0x20008000) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) 14:07:14 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd) 14:07:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) [ 1387.416081][T27781] IPVS: ftp: loaded support on port[0] = 21 14:07:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e800000032003dfa00000000fcdbdf2500000000d4000100d00001000f00010074756e6e656c5f6b6579000004000280a00006"], 0xe8}}, 0x0) 14:07:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000005}]}) 14:07:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000104, 0x0) [ 1388.228424][T27821] IPVS: ftp: loaded support on port[0] = 21 [ 1388.358275][T26158] tipc: TX() has been purged, node left! [ 1388.385915][T27830] tc_dump_action: action bad kind 14:07:15 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0xe8ba, 0x0) [ 1388.578269][T27833] kvm [27825]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000005 data 0x0 14:07:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, &(0x7f0000000200)={{{@in=@multicast1, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0xe8) 14:07:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "fce702ddf444a6e1aa26e08c1dfd4967ebbae52a5b1a98ca59b138b09c6adae6fa92f69194106b27a4011287fe0f71a6ffc0340562a934c12d15b0519c7a385e", "51bd88ccf67fcf9cf5ccbf238f37f15c0cd48a6b4b81a815ef85300a01209fc3"}) 14:07:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) 14:07:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x18}}, 0x0) 14:07:18 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000004d40)={&(0x7f0000000280)={0x1e, 0x3, 0x0, 0x2}, 0xff6e, &(0x7f0000004d00)={0x0}}, 0x0) 14:07:18 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:07:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000080)=ANY=[], 0x4) 14:07:18 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_fuse_handle_req(r0, &(0x7f0000000240)="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", 0x2000, &(0x7f00000029c0)={&(0x7f0000000080)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:07:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffff7}]}) 14:07:18 executing program 5: r0 = socket(0x29, 0x5, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x20000054}}, 0x0) 14:07:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001200)='%', 0x1}], 0x1}}], 0x2, 0x604d800) 14:07:18 executing program 4: r0 = gettid() r1 = getpgid(0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000180)) 14:07:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="f6d4eb6e3f388ead454889a1d98d0670e92b210070fbee30462fe5dedd3d0cffcab220ee536ae4f43ceb9a46709bf9c15fbf5a71d4308b8275dc898a8eb97e5ca9e3d506dffb8276b8394169d1914b204a83c810fc61365718f5bb813fbbc091b06f12fe", 0x73, r0) 14:07:19 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) 14:07:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x1}, 0x18}}, 0x0) 14:07:19 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f0000000000)={'macvlan1\x00'}) 14:07:19 executing program 5: r0 = socket(0x25, 0x5, 0x0) connect$bt_sco(r0, &(0x7f0000000380)={0x1f, @none}, 0x8) 14:07:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000070000000000000000000001006c000013002b02"], &(0x7f0000000080)=""/205, 0x2f, 0xcd, 0x1}, 0x20) [ 1392.537546][T27906] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1017 sclass=netlink_xfrm_socket pid=27906 comm=syz-executor.1 14:07:20 executing program 4: r0 = socket(0xa, 0x2, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x65, 0x0, &(0x7f0000000100)) 14:07:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x25, 0x0, 0x0, &(0x7f0000000080)) 14:07:20 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x7243, 0x0, 0x0, 0x0, 0x0) 14:07:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x84, 0xd, &(0x7f0000000080)=@fragment={0x0, 0x2}, 0x4) 14:07:20 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)) 14:07:20 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r3 = socket$inet6_udplite(0x2, 0x3, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/83, 0x53}}, 0x0) io_uring_enter(r0, 0xc86, 0x0, 0x0, 0x0, 0x0) [ 1393.561287][T27920] sctp: [Deprecated]: syz-executor.3 (pid 27920) Use of int in maxseg socket option. [ 1393.561287][T27920] Use struct sctp_assoc_value instead 14:07:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x34}}, 0x0) 14:07:21 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)) 14:07:21 executing program 3: socket(0x1e, 0x4, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/timer\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fe}, 0x0, 0x0) 14:07:21 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x11ffffce1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 14:07:21 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0']) chdir(&(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) chown(0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000000)='./file0\x00', 0x2) 14:07:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 14:07:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000800)=""/103, 0x67}, {0x0}, {&(0x7f0000000940)=""/137, 0x89}, {0x0}], 0x5, &(0x7f00000002c0)=""/26, 0x1a}}, {{&(0x7f0000001a80)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/199, 0xc7}}, {{&(0x7f0000001f40)=@tipc=@id, 0x80, 0x0}, 0x1}], 0x4, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x1f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') 14:07:22 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x40096100, 0x0) [ 1394.847976][T27966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1394.866227][T27966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1394.874303][T27966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1395.050213][T27972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1395.070081][T27972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1395.082670][T27972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1395.346024][T27979] IPVS: ftp: loaded support on port[0] = 21 [ 1395.676183][T27980] FAT-fs (loop1): bogus number of reserved sectors [ 1395.684962][T27980] FAT-fs (loop1): Can't find a valid FAT filesystem 14:07:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) 14:07:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x0, 0x8000000000000000, 0xfffffffc, 0x0, 0x387b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x4, @local, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="58000000140019234083370e040d8c560a067fbc45ff81054e220400000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005fcff000000000000000000", 0x58}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) clock_nanosleep(0x2, 0x1, &(0x7f0000000080), &(0x7f00000002c0)) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="58000000140019234083370e040d8c560a067fbc45ff81054e220400000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005fcff000000000000000000", 0x58}], 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) [ 1395.876229][T27984] IPVS: ftp: loaded support on port[0] = 21 14:07:23 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x3, 0x6, 0xacf) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000200), 0x40000000, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x3) r3 = dup2(r2, r1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="09e9430000000000800000080000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00E', @ANYRES32=r2, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r0, @ANYBLOB="0c00990004000000000000000800db00", @ANYRES32=r3, @ANYBLOB="0965d0b98cd53f98e84274092fc8c706a9b079a6bf1125a1f02de3999293aebb2341be2d4536155cb5590541170c361e9f3433e911b832f3f02d87d1d6a926c5fd6c01522a781fd7375eea111dc2c94566dc7df8d4731162c92a6056a93d49a6a22be610a0578daee60f4f5556b21a020990e72602929bb75822b5068a"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x1cf, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) [ 1396.070417][T28004] QAT: failed to copy from user cfg_data. [ 1396.257193][T26158] tipc: TX() has been purged, node left! 14:07:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000a40), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x101000) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14:07:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="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", 0x14f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 14:07:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x0, 0x8000000000000000, 0xfffffffc, 0x0, 0x387b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x4, @local, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="58000000140019234083370e040d8c560a067fbc45ff81054e220400000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005fcff000000000000000000", 0x58}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) clock_nanosleep(0x2, 0x1, &(0x7f0000000080), &(0x7f00000002c0)) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="58000000140019234083370e040d8c560a067fbc45ff81054e220400000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005fcff000000000000000000", 0x58}], 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) 14:07:24 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100)) getdents64(r0, 0x0, 0x0) 14:07:24 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x4, "a3ef07749fa55f625aa6af3c7307f2177f0000000000000015d530000000feff3921a0fcb3ac401de11c1743caeb837106f4e954a5b84df6449fe66884b3bc16079f565cea173db80437f6272b1b42d346f555dd6c020a72"}, 0x68) [ 1397.690177][T28034] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:07:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:25 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1397.835258][T28038] dlm: no local IP address has been set [ 1397.841073][T28038] dlm: cannot start dlm lowcomms -107 [ 1401.287869][T28021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.295524][T28021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.546969][T28021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1406.755600][T28021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1408.756410][T28023] device bridge_slave_0 left promiscuous mode [ 1408.763855][T28023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.782899][T28023] device bridge_slave_1 left promiscuous mode [ 1408.790519][T28023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.809811][T28023] bond0: (slave bond_slave_0): Releasing backup interface [ 1408.831183][T28023] bond0: (slave bond_slave_1): Releasing backup interface [ 1408.854176][T28023] team0: Port device team_slave_0 removed [ 1408.868626][T28023] team0: Port device team_slave_1 removed [ 1408.875397][T28023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.886701][T28023] batman_adv: batadv0: Removing interface: batadv_slave_1 14:07:37 executing program 1: 14:07:37 executing program 5: 14:07:37 executing program 4: 14:07:37 executing program 3: 14:07:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:37 executing program 2: 14:07:37 executing program 5: 14:07:37 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) renameat2(r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 14:07:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1c8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@private1, @empty, [], [], 'syz_tun\x00', 'wg2\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ipv6={@local, @empty, [], [], 'wg2\x00', 'syz_tun\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'vlan0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 14:07:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:37 executing program 3: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 14:07:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) 14:07:38 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) 14:07:38 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 14:07:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0}) 14:07:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:07:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/213, 0xd5}], 0x1, 0x1, 0x0) 14:07:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0}) 14:07:38 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 14:07:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000c40)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc4c85512, &(0x7f0000000040)={0x3}) 14:07:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') unshare(0x400) fchdir(r0) 14:07:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='limits\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/12, 0xc}], 0x1, 0x0, 0x0) 14:07:39 executing program 5: timer_create(0x2, &(0x7f00000000c0)={0x0, 0x7, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000008c0)=""/384, 0x180) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) 14:07:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0}) [ 1413.430110][T26158] tipc: TX() has been purged, node left! 14:07:41 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 14:07:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 14:07:41 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) 14:07:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) 14:07:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb435) fcntl$lock(r2, 0x25, &(0x7f00000003c0)={0x1}) r3 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) read$char_raw(r3, &(0x7f0000000600)={""/62823}, 0xf600) r4 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 14:07:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0016801800018014000b"], 0x3c}}, 0x0) [ 1414.323629][ T28] audit: type=1804 audit(1599142061.698:87): pid=28218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir116766593/syzkaller.RAxnfe/686/file0/file0" dev="ramfs" ino=100358 res=1 [ 1414.476065][ T28] audit: type=1804 audit(1599142061.861:88): pid=28225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir943178827/syzkaller.ZbiROJ/1134/bus" dev="sda1" ino=16379 res=1 14:07:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) [ 1414.554018][ T28] audit: type=1804 audit(1599142061.932:89): pid=28225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir943178827/syzkaller.ZbiROJ/1134/bus" dev="sda1" ino=16379 res=1 14:07:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000280)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x5}) 14:07:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0), 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400)=0x20, 0x9) get_robust_list(0xffffffffffffffff, &(0x7f0000000380)=&(0x7f0000000480)={&(0x7f0000000140), 0x0, &(0x7f00000002c0)}, &(0x7f00000003c0)=0x8) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000000c0)={'syz', 0x1, 0xd}, &(0x7f0000000200)='R\tr0s\xac\x84cusgrVex:DeXy\x13\x12 =\xe0A(\xc8\x17~\xee\x87\xd4\xd7i\x0fH\x10\xe5\x14U\xf1E\x7f\xea:X\xaf\xe1\x11\xcb\ftuo\xba\x1f\xd8xx\xf7\xca\x04\x1a\xd3\x84%4?R\xcc\'lr\x9d\x05R\x0e', r2) [ 1415.060774][ T28] audit: type=1804 audit(1599142062.449:90): pid=28218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir116766593/syzkaller.RAxnfe/686/file0/file0" dev="ramfs" ino=100372 res=1 14:07:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) 14:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c}}]}, 0x58}}, 0x0) 14:07:42 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000000)="1c0000005e001f3814584707f9f4ffffffffff18180000001f000000", 0x1c) 14:07:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000001c0)=""/180) 14:07:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) 14:07:43 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) 14:07:43 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) io_uring_enter(r0, 0x7243, 0x0, 0x0, 0x0, 0x0) 14:07:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 1417.134673][T26158] device hsr_slave_0 left promiscuous mode [ 1417.144520][T26158] device hsr_slave_1 left promiscuous mode [ 1417.161766][T26158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.169761][T26158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.190774][T26158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.198362][T26158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.251403][T26158] device bridge_slave_1 left promiscuous mode [ 1417.258380][T26158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.281704][T26158] device bridge_slave_0 left promiscuous mode [ 1417.288824][T26158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.323736][T26158] device veth1_macvtap left promiscuous mode [ 1417.330077][T26158] device veth0_macvtap left promiscuous mode [ 1417.336215][T26158] device veth1_vlan left promiscuous mode [ 1417.342632][T26158] device veth0_vlan left promiscuous mode [ 1420.856139][T26158] team0 (unregistering): Port device team_slave_1 removed [ 1420.872789][T26158] team0 (unregistering): Port device team_slave_0 removed [ 1420.890962][T26158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.909427][T26158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.993878][T26158] bond0 (unregistering): Released all slaves [ 1421.055221][T28288] IPVS: ftp: loaded support on port[0] = 21 [ 1421.258434][T28288] chnl_net:caif_netlink_parms(): no params data found [ 1421.368387][T28288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.376201][T28288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.386329][T28288] device bridge_slave_0 entered promiscuous mode [ 1421.404685][T28288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.412695][T28288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.423129][T28288] device bridge_slave_1 entered promiscuous mode [ 1421.504331][T28288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.524350][T28288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.588001][T28288] team0: Port device team_slave_0 added [ 1421.606922][T28288] team0: Port device team_slave_1 added [ 1421.664540][T28288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.672293][T28288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.698959][T28288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.714337][ T8713] Bluetooth: hci3: command 0x0409 tx timeout [ 1421.726390][T28288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.734391][T28288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.761768][T28288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.828183][T28288] device hsr_slave_0 entered promiscuous mode [ 1421.836930][T28288] device hsr_slave_1 entered promiscuous mode [ 1421.860093][T28288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1421.867863][T28288] Cannot create hsr debugfs directory [ 1422.267232][T28288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.297793][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1422.306939][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1422.325357][T28288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.346784][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1422.356744][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1422.366527][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.374908][ T9100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.400544][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1422.410348][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1422.423638][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1422.435229][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.444085][ T9100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.452605][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1422.475881][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1422.501982][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1422.512745][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1422.548882][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1422.557707][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1422.568797][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1422.580647][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1422.589922][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1422.599461][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1422.608897][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1422.625314][T28288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1422.669863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1422.677779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1422.707591][T28288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.817180][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1422.827685][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1422.877491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1422.887897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1422.908143][T28288] device veth0_vlan entered promiscuous mode [ 1422.917391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1422.927713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1422.954596][T28288] device veth1_vlan entered promiscuous mode [ 1423.013222][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1423.022462][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1423.032583][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1423.042420][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1423.064775][T28288] device veth0_macvtap entered promiscuous mode [ 1423.085936][T28288] device veth1_macvtap entered promiscuous mode [ 1423.124342][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1423.135166][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.145622][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1423.156249][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.166403][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1423.176994][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.187352][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1423.198073][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.212498][T28288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.221140][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1423.231658][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1423.241330][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1423.251324][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1423.279443][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1423.290016][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.303307][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1423.314049][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.324240][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1423.334892][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.345784][T28288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1423.357011][T28288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.370874][T28288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.381556][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1423.391301][T28107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:07:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fc880eff77040000000020007700008000200000000040000000000000000000", 0xffffffe5}], 0x2) 14:07:51 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1000000000000108, &(0x7f0000000a40)=[{&(0x7f0000000140)=""/31}, {&(0x7f0000000700)=""/89}, {&(0x7f0000000780)=""/129}, {&(0x7f0000000840)=""/148, 0xc}, {&(0x7f0000001380)=""/4096, 0xffba}, {&(0x7f0000000900)=""/81}, {&(0x7f0000000980)=""/150}], 0x381, 0x0) 14:07:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000880)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 14:07:51 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) 14:07:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) read(r0, &(0x7f0000000040)=""/69, 0x45) 14:07:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x1275) [ 1423.789886][T28107] Bluetooth: hci3: command 0x041b tx timeout [ 1423.935751][T28511] input: syz1 as /devices/virtual/input/input20 14:07:51 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) 14:07:51 executing program 5: sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000001c000000000000000000003f00000000000000008000"}}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) 14:07:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x8) 14:07:51 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 14:07:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa0806"], 0x2e) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18100, 0x0) 14:07:52 executing program 3: 14:07:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@dmask={'dmask'}}]}) 14:07:52 executing program 4: 14:07:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:53 executing program 1: [ 1425.874415][ T8713] Bluetooth: hci3: command 0x040f tx timeout 14:07:53 executing program 4: 14:07:53 executing program 3: 14:07:53 executing program 5: 14:07:53 executing program 1: 14:07:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:54 executing program 4: 14:07:55 executing program 2: 14:07:55 executing program 3: 14:07:55 executing program 5: 14:07:55 executing program 4: 14:07:55 executing program 1: 14:07:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) 14:07:55 executing program 3: 14:07:55 executing program 1: 14:07:55 executing program 5: 14:07:55 executing program 4: 14:07:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) [ 1427.960304][ T8713] Bluetooth: hci3: command 0x0419 tx timeout 14:07:55 executing program 2: 14:07:55 executing program 1: 14:07:55 executing program 3: 14:07:55 executing program 5: 14:07:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) 14:07:55 executing program 4: 14:07:56 executing program 2: 14:07:56 executing program 1: 14:07:56 executing program 5: 14:07:56 executing program 3: 14:07:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:56 executing program 2: 14:07:56 executing program 4: 14:07:56 executing program 1: 14:07:57 executing program 3: 14:07:57 executing program 2: 14:07:57 executing program 5: 14:07:57 executing program 4: 14:07:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:57 executing program 3: 14:07:57 executing program 1: 14:07:57 executing program 2: 14:07:57 executing program 4: 14:07:57 executing program 5: 14:07:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:58 executing program 2: 14:07:58 executing program 1: 14:07:58 executing program 3: 14:07:58 executing program 4: 14:07:58 executing program 5: 14:07:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:58 executing program 2: 14:07:58 executing program 3: 14:07:58 executing program 1: 14:07:58 executing program 5: 14:07:58 executing program 4: 14:07:59 executing program 2: 14:07:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:59 executing program 3: 14:07:59 executing program 1: 14:07:59 executing program 5: 14:07:59 executing program 4: 14:07:59 executing program 2: 14:07:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:07:59 executing program 3: 14:07:59 executing program 1: 14:08:00 executing program 4: 14:08:00 executing program 5: 14:08:00 executing program 2: 14:08:00 executing program 3: 14:08:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:08:00 executing program 1: 14:08:00 executing program 4: 14:08:00 executing program 5: 14:08:00 executing program 2: 14:08:00 executing program 3: 14:08:01 executing program 4: 14:08:01 executing program 1: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) 14:08:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:08:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x400454dc, 0xfffffffffffffffd) 14:08:01 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) 14:08:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x40405515, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:08:01 executing program 4: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 14:08:01 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xf0ff7f) 14:08:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:08:01 executing program 2: io_setup(0x0, &(0x7f00000002c0)) 14:08:01 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000006c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x16, &(0x7f0000000200), 0x14) 14:08:02 executing program 3: add_key$user(&(0x7f0000000940)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 14:08:02 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x29, 0x0, &(0x7f0000000240)) 14:08:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:08:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44003) 14:08:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x1}, 0x18}}, 0x0) 14:08:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f00000030c0)=[{&(0x7f0000002fc0)='\t', 0x1}], 0x0, 0x0) 14:08:02 executing program 4: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 14:08:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x5, 0x0, 0x4) 14:08:02 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000020c0)={0x2b, 0x4, 0x0, {0x0, 0x0, 0x45}}, 0x2b) 14:08:03 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x81000000, 0x0, 0x0, 0x0) 14:08:03 executing program 4: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x10}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x33fe0}}, 0x0) 14:08:03 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$l2tp6(r0, 0x0, &(0x7f0000000040)) 14:08:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="00a477795b0000000000073800b3d940773f952a54845ec53d900000000c000f000000000000008001000000000000000000000000000000000000000000000000000d87c807b9b395bda2e71f11a84c68f2b118ce"], 0x58) 14:08:03 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80044d76, &(0x7f0000000080)) 14:08:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:08:04 executing program 2: r0 = socket(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e000002d317904ebf5e6000003"], 0x14) 14:08:04 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x2600) 14:08:04 executing program 4: getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 14:08:04 executing program 5: r0 = socket(0xa, 0x3, 0x6) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa, 0x0, 0x0, {}, 0xbe}, 0x7e, &(0x7f0000000240)={0x0}, 0x7e}, 0x0) 14:08:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) 14:08:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x38, 0x0, 0x4) 14:08:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x29}, 0x38}}, 0x0) 14:08:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000000)={'batadv0\x00'}) 14:08:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x8}]}}, &(0x7f0000000140)=""/182, 0x26, 0xb6, 0x1}, 0x20) 14:08:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000040)=""/54, &(0x7f0000000080)=0x36) 14:08:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x7a, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 14:08:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x5, 0x0, 0x0) 14:08:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 14:08:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x7b, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:06 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0xffffffffffffffff) 14:08:06 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 14:08:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x46, 0x0, 0x4) 14:08:06 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x29, 0x4, 0x0, 0x0) 14:08:06 executing program 5: openat$drirender128(0xffffffffffffff9c, 0x0, 0x43c300, 0x0) 14:08:06 executing program 3: r0 = syz_io_uring_setup(0x13eb, &(0x7f00000010c0), &(0x7f0000e91000/0x1000)=nil, &(0x7f0000e1c000/0x4000)=nil, &(0x7f0000001140), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:08:07 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}, 0x1c) 14:08:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 14:08:07 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0xc004500a, &(0x7f0000000080)) 14:08:07 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x4, 0x4}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xa000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) clock_gettime(0x5, &(0x7f0000000140)) r2 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x7, 0x23a, 0x800}) semget$private(0x0, 0x0, 0x228) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000001c0)={0x3, 0x3, 0x80000000, 0x80, 0x45, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0x3}, @clear_death], 0x13, 0x0, &(0x7f0000000240)="7209729c934a2eb028b48d9a6add46a46abbfd"}) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001400)='/dev/cuse\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000001440)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000014c0)={{{@in=@private, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000015c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f00000036c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = getpid() getresgid(&(0x7f0000005700)=0x0, &(0x7f0000005740), &(0x7f0000005780)) sendmmsg$unix(r0, &(0x7f0000005880)=[{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000340)="ff5c1e00", 0x4}, {&(0x7f0000000380)="e6dcf7d6cafb7b6713ad1383cb9bf4d831", 0x11}, {&(0x7f00000003c0)="8c3ef8bb81b6cd85245ddc1c4e54760587d2226d4f5344b19e0f5dca8a42e86a0f6c8649405dde213c0189912246796d301073f3cfa11e6b37d44c392d8be3e0b1a7bf2de310ee4c61c7f126a0288ee7eb859b1248a9c85e10add325b6731d5e50c5de71610892b3f666bc583309135b55563500febbcd4d5a8e0d0282f1657c92243d214139daa55fc56cdb7fcabc6f148117c9f33327d409dec1dd268b104e5efa1fb2beed974efb98a2cd61b32c7a02ac89c86db486a8cd57b9706f9141bbcd102faec80ff2cc73d44109fc126e4777265b046f1aeea39354a7feb1cc3edb9620e2b7c79d77b536ecdb326f254acb1986ab59f74e4875b47ce7059e7cb31871a22d19827f859e9e5789d6f4e080ced536820b8c146599cc442d9ef3e56f49cbf1ac53b6b1f58c2d53229ef368b987854742907eecc843d6d9ff12f30281d8c5876abb8c5d5f02bd69aae4554a2de32933675a57bfce1a202377b4f75a2245f87045457688db9e2d0790dda715e0892643463fb1e8146e061e112ab66e86e023f9ddbedd4f50924f36c5ccf5af109748c3696108406e684cd27bf91894be66d4daba80e9208e731e08d1c3b83b47e5570ef6f9458c6b75da7a27a5a6d51e1e782593e79f0d8bb3a9c2aaf6a9fc9c6b7ff626749d64f4034acedd387537e45cf72b49d1b30d75891cd117901b82976d939b1fa345526ffabbad4c0562b151946191d04dae1031269ae064c8854503b62be3aca0b616cab34fc70c16705fbec6723ff27ff7b7bdeee5614ac074eebe1f044eed426bb2d98c187df9387e56c66cfed165468fda0ac9a5a6ebe5eeebd94bd340ef7e69a0e02a9eb241dc6cc781b92122efe9102444f378fc40c5096d60aa171bdd9499ba397aad8ad11b208f7feff6ac8c869c900951708fb0347130dbb7f096ecac60fcbb88669c70f357d88fc23e07f04c72f78dd02f3df91c21a67baaec70ed022ab17f9e20f22e8736d59997aa36805801d84062db97d25aaeb9307374ad2592a36c5ae542b6c52de80e782e90bd1867ae780954c8b7aa5c0232a6f9de0ff43c05dbe27f67deae3d1c2bd0f568b24edd90dca06b925e7aadb98f2b5341eb593e0135b9ff7e5350d35ac600d1c65b9174afa8e23e8791d00829dea636ecce44629ae55a50438d60fc8cb2c95540e605b4dfe3681079f4af695ec921e0f3aa2b5c95d84fbf458dab8961a2034aee015971feee3f7f82278836bdec9657f0a42e7bfe76bd1137a59b33aa78b62b9bc46e94458e4767cdd029c583d9170436383d0a7365d4e02b6fa1a437f309a13e5b527909bffe78f11081c53d85bbb9f5a661470b4111adf3a7f2f07744ec741a31b6638a054faca6b1cfd69d165ec0daf075314015474681edc289c9349a546d516c03e1f3feaa1c0782badcf8a5c1f1f91f21a81ce0552644b0c2f1c1997bd49890dd5d944f018739a16779631027045eab936afc527be5ba032182d7ada379d4d2f94b8ce962c12849facff63180c8ecd02ed8a4ab2d0c65c9453f0d3b9d6136a0f86f106f77225a1e7b7e24205cf05f8a4a074fdd23bec5f9121ab05d8371c4f7da6cc6ffe9a0aa5530cf65582f2d9aa21088c9a18f468e3df9957bb20897e2242533bb64a372826510216997ba798906da471f1b60e4c709a81b4a4616d69b7ecde47e2e79861755908f103fdde22dd9bb1aeaea9c2b33eded8cbf3fdddbe48f726c503489aa336cfb5dd7ee048ff7c54f1ec47ffd3677ccf0661c06546c677711c24a67b7d6322133baa5eb8aea5afdccff9c7c65478cfada926bbae4c8e246911835ec10931f61d2696c6b85ebc19bba8fdc3370f3b6c1d83c12fbba5d84b7ac6caa5e2d13b815b2dab34b22519f667565a6722b18875531084824c23de0547ea7e1f874e4b6c2cc77e6071aad5673a5d35290d755d1983ba64f19880f3e3d1a27a8bb70823872b2a145049f6ecb02f90f25c57d3df17db0f7d0371e8abf0e51b86b072920179767d73bb19fd6db44bf0b8e0ba731d37ef2c2ebbed8a17f3de6bdaf309454933067713c2a39c101f813a6343d730732a1b733935b2ddf3c9fd8a9596a6dc4b369aada22162f81095f8ee829616b2f46671774140289c8fe8c0bde652b4dce603c50ca7d213c8daa72ea76962b922777d65826c4472ae63cd3078cfe156d76c851385f4e24b08b292a51d229e2e0b78510d91655e186b6a22526c0df88d921c38c5eef9bd2d5abd3b6f7c2b3f1df1ad541dfe77407b873bda2486964518e339b41312aae0916bb5c01fc9b88371fb89579b38d1061dbb33d34d03a22531710f738119fb7761de7bad2a8167923a02b8559f58a4fe97d7341c44e86f98887a587eb4da62950ff0b5beee7f56498138fe95cd77513d913d576d3b4cf7a052e02504efd16e247ae372cca45359bd3ee594ea54b18cfc09cfdb8dc64daa51edd1d5d63701d8bc289c8814c27a14be9b0fc02acff258d2bad12a52f93494ccdd4ee945688800bcf7c13ced9d32bf9c61015d708589b1094f7d80b775769a410b2aa7d08666965a22957c0f8eef2769b40a063b6def79f2b00941b9b96a206b38d1424816eb00459707e7cf143eb3fddbf51eeb3f27bf5f03f3d23e478422a6bc7113c09fc85d3fff212718aa2e4e5ca981a2d75d49de593d2f802ee1a318898cb3f1a67e220f9964d9c4ef7c4ac6e9246ced1cf75249a72d4a29e673e5375a73759413834a9d5713a1cdab72af5f824a10efbb9f496cbeb8ee05fda95c8edd97dca52b5d4bd7c2d866a481ca7075f515bff9b8bf44c306b57ec7546f2edf10c5527cc0047901c6e2f6700b2ec8aa0235bcf9b0d5a4054aa4d48d7d20593a87509c89369843bd72d028857643b2155f4fea76d8718743ee371fb51b597825b8d1aa4453e7a95c64a55f9d01f1d8ba61817e44b343bfac4938166f798a2485ce45ff40a0d91010dceac0af4a983c00372e3d37b3cf582b38e216f0a87d0a9178dab1f8e3f7e709c327deab00d5a0e6dbd923fe8952fc0ccfde62fe67916a1fa5340606b65d522c1951ffb2354c044146850514ff37d3801804cefc175b8a33448b40a5a2fbe10f7701da859962af24454c20d9b211fa9b18de5f8bf22218e4687583c502de3a2a0e1a7ebe25b751d000d9212440543e51f57e0c49e1957ca5a77625237ac2aacc34d5311bf1d5d6c119138db81c18a967999e2702b4e38e51328c9e2bae8b4839154b5a837bfc8692cbc04f2256bde9815ea02785c0c34b52783f74ef56a9efbbced1b9dc596eb335549e768499156495562470ed635fac3aa84367547bb52c7bd4d5c03b21f39ed310de062a10a321e2cbae1523987f2d08dd760782a04bc015230a1f048ddb2c96f27a28228e6da8f05940a89610777ff1f1f670f484ffe9562f655a627d46b8d3c3bf3a317495d744ec12a3a97b9f6c7f8a17c74d2bda4819172fec8e10560f781f499a2be4dabb30037ad408cd2d9545d0c66ff1697a6f3a9a3a0568261070658dea186b124cac93672d9a9d9fc8cfeb6cb4cac7926263c7b6cf42fbc63c5c55ca1463322acd1c41e98f0f279fd71d21348eb7914b56a6007b4b6bd285644300ab437c49bae7f7f6e1f351583cc87b542a98756a7f9285bc59b544b9504139407828292daeab6ce6713da91e4b783dc3fab71b369902173b884ca47c0c2c09ae60553d183a1fca6720a9634d6b7b2e2633ad573cb26460a4b2e4339b774a847c58c7eceff4278fbe5c32bf2a5df600d5789cbe8c1a27ba0d95b8edaa87f931d173604b2448449c329e45c4c3fc91dc8719c30feb0a84b6a43fbcb1ee41b79f939db75f8b0c8405710b3e10850b1ae77852c1428e13cbd47e57e215d4ee7e14712f04b4f94455773f08fd386cf98020259993f0deb87478c5f556efcfd9a41a166061c9c9ff75f28bdc85cb6a57407fa0d11aba063e0bdc8343c404988a4efb627d655869b345f1bedecac75df49e48ab762f087f17f511f60150b1770f8ea88c2d4bbcb5ceadf48b3a660f364ecce6d0c69d5ba3f04967a1bba2599af4123946e7887f275f4279b0c9bf5f696f9a8d3c3afe80dba37258efb28b3cdf39e21de9e682cfadfaabe5bf44ea7a045eb2ad0cbbcda74389d3e34e90160f1889112b6573ef2157917ecd103206a640fa2423da24eac4b6e964b061185e80f6c79b74ed551fed109e3c67725254d05a5d7ec07d19a539ffd6dc99288b1a42ae6027b1d9f27af3c0fbccbc2dcf0078264c5e600677900939e93dbba694635fb5b3b263f3d4d3c565749fb954d899006b6f3613943e37bef5a4379f19bbb913ebb056c88efa7b469ee0e94be00e27dcc1b62f94dc28ed56b1d412708bf8d432ed7e74f3d6959e8a2acbc4887913abfe414fdf6a0530f8135f183275bb5a7d61c562ab12b0f529df76710c9b4120cad9e97201437dd59f19ba8e0542f4fc3581e4cda2ab287fa7383bc39b693ae303d369a7b54648826bed4f4080684f749993ca4598032524e4eb55eef6ba548c39344a90c6d5261c8f25ba69a8aa556cd672a27d03d2842f5202fed6b3dbd11a8b9bec71e5b1b88abc5caf84fed12a6685e057a4e1eb193506953e27668af56b4a44a0a4610d2a76b0f70df8a5da41e6acaaf02f8e3fe366b2c4517e857049fc69374c4780397db6d4cedfea2b33f9019a7742130ed9b14b8dc2bb79a9b89a47dc4e1f06a7df1b503cf96a5ab567a3c213fcbb4fca90b3d0edd6ab175b41897931413c7daeaa9d6a867d429f348a8dc0037bc7f569f5da770ab202d51abe423125e7b915d25be3cbaf301d825d9fef05256364286d63b0d33df8ccf07fc421bfb3838673165e215788165020d5917a9b948ae2f8403173844f11bbfd350b92b573dfe2972c78c9c28088dbaf56a87606d5d4286cda0dbcae8bb6750cd3697404bc4fe24cfa300d82b03da6612f938e6c575ad5de8fdfa83b5a6a475b6aae2604d08a4f1a51eea6d6ec4a1f121ab51b1b6a52cdb1cfc681199808988cc5c60c488cfda524435854ce2b79bdb63ef688a87d6ffed7cc6d9e8da3f55d0c51ad864de1f4d4b0d37be366858d999812d233b49a7aae46b871d18643fde52716e336a43a4a4919bfc10853ea17cfd8c301e5ecd8e6f4fed1a27f713febf1d248996326c06edafe08fe241225f0564a64246a0b4501a81fde61465f024e10f6de3d9e06d1f71983cd499cae39ffdcef60fbcd05f2a1020b76fce3bfd1a2d224b94eb51689e5cac26255726ba79e39ee72f056002749428db9ed6df3a1f709e84a97c940d0cf4639a047e34bc846348a5fc855a996910d84e822bfa4caebf141da6a76823fc1028b14c8520428a9aac7b3ba12cfa8aadfd71d77138bc2323915dc7f31544fb4f38486f5e3104f527241371b22e2cb2f6ab906d787b6d12a5061921011144459e1e49984f84aea437a5bed8c041c2e3999c6abfca0f9fbc3a50013083d8df93b1f0f53e2f8828d41f69af158c9d35f3a69c7599337bb183b9655591cfe5f24153e75285f6954400fd61d1641aafd9e1271d9d7ba49b1d4d16a0002fe7c364954084ffee9b173586ca8d66e720fb2039d46e414711a7a84d5073830fa64fe473f2eb0a614576a3d243216af471eb88251db24b84ccc7d2daa6344acc5217bf7e05f14d99da91d33bf89578829acfea434f7b3ad612b11449536a44e7188093d2d1423d3097a37bb1b1cd6e345061b0d22c952bc885c9115d4a6efd3466f96af9b41fc4fe7499414add18fbe527607286821cd9243a46ec6b45f45aabb2fef22b", 0x1000}], 0x3, &(0x7f00000057c0)=[@rights={{0x2c, 0x1, 0x1, [r3, r2, r4, r5, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0xb0, 0x20040845}], 0x1, 0x4) 14:08:07 executing program 5: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000006c0), 0x4) 14:08:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0xb, 0x0, 0x0) 14:08:07 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x109013, r0, 0x0) 14:08:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 14:08:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0xfffffffffffffef2, 0x0, &(0x7f0000000d40)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:08:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x442) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 14:08:08 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) 14:08:08 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x4, 0x4}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xa000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) clock_gettime(0x5, &(0x7f0000000140)) r2 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x7, 0x23a, 0x800}) semget$private(0x0, 0x0, 0x228) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000001c0)={0x3, 0x3, 0x80000000, 0x80, 0x45, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0x3}, @clear_death], 0x13, 0x0, &(0x7f0000000240)="7209729c934a2eb028b48d9a6add46a46abbfd"}) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001400)='/dev/cuse\x00', 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000001440)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000014c0)={{{@in=@private, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000015c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f00000036c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = getpid() getresgid(&(0x7f0000005700)=0x0, &(0x7f0000005740), &(0x7f0000005780)) sendmmsg$unix(r0, &(0x7f0000005880)=[{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000340)="ff5c1e00", 0x4}, {&(0x7f0000000380)="e6dcf7d6cafb7b6713ad1383cb9bf4d831", 0x11}, {&(0x7f00000003c0)="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", 0x1000}], 0x3, &(0x7f00000057c0)=[@rights={{0x2c, 0x1, 0x1, [r3, r2, r4, r5, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0xb0, 0x20040845}], 0x1, 0x4) 14:08:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x9, 0x0}) [ 1441.478117][T28868] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 14:08:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 14:08:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x76, 0x0, &(0x7f0000000580)) 14:08:09 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531102}) getitimer(0x0, &(0x7f0000000180)) 14:08:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x81785501, 0x0) 14:08:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89b0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 14:08:09 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)) 14:08:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x65, 0x0, 0x0) 14:08:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x30, &(0x7f0000000000)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x400}}, {{@in=@remote}, 0x0, @in=@loopback}}, 0xe8) 14:08:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8929, &(0x7f00000003c0)={'sit0\x00', 0x0}) 14:08:10 executing program 4: r0 = socket(0x2, 0x6, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 14:08:10 executing program 5: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_genetlink_get_family_id$team(&(0x7f0000001ac0)='team\x00') 14:08:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 14:08:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x40045010, 0x0) 14:08:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_io_uring_complete(0x0) 14:08:10 executing program 5: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) 14:08:10 executing program 4: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000040)={'gre0\x00', 0x0}) 14:08:10 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 14:08:11 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x280100, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 14:08:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) 14:08:11 executing program 3: prctl$PR_SET_PTRACER(0x1b, 0xffffffffffffffff) 14:08:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 14:08:11 executing program 1: r0 = socket(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r0, 0x10d, 0xd, 0x0, 0x14) 14:08:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x12, 0x0, 0x0) 14:08:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0}) 14:08:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x301}, 0x14}}, 0x0) 14:08:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x3c, 0x0, 0x4) 14:08:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 14:08:12 executing program 1: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}, 0x38) 14:08:12 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531102}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x35f000) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 14:08:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) socket(0x0, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @broadcast}}) 14:08:12 executing program 5: syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xffffffffffff0483, 0x40) 14:08:12 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x40, r1, 0x3, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x40}}, 0x0) 14:08:12 executing program 1: r0 = socket(0xa, 0x3, 0x6) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "9dede727971425ed82833fc9da958a5a90bffbb03666f61a376411b516d05688bba6fe2d791e8769a7c1315213602505ff54adb26fdb6672c3029438d26b594c"}}, 0x80}}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x7e}, 0x0) 14:08:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$input_event(r0, 0x0, 0x0) 14:08:13 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40) 14:08:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0}) 14:08:14 executing program 4: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:08:14 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x2a, 0x0, 0x300) 14:08:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x74}, 0x2000000c, &(0x7f0000000140)={0x0}}, 0x0) 14:08:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@mcast1, 0x4f, r2}) 14:08:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x31, 0x40001020, r1, 0x0) fanotify_mark(r1, 0x90, 0x0, 0xffffffffffffffff, 0x0) 14:08:14 executing program 5: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/199, 0xc7}], 0x2) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x300}, 0x0) 14:08:14 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002040)='/dev/btrfs-control\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 14:08:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 14:08:14 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 14:08:14 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0cffa2bb"}, 0x0, 0x0, @planes=0x0}) [ 1447.694277][ T28] audit: type=1326 audit(1599142095.082:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29012 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f6b549 code=0x0 14:08:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) 14:08:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0}) 14:08:16 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x70e, 0x20001) write$vhost_msg_v2(r0, 0x0, 0x0) 14:08:16 executing program 5: r0 = socket(0x2a, 0x2, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 14:08:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x40) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x890b, &(0x7f0000000040)) 14:08:16 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 14:08:16 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8906, 0x0) 14:08:16 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x28, r0, 0x1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 14:08:16 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) waitid(0x3, 0x0, 0x0, 0x8, 0x0) 14:08:16 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x2, @tid=0xffffffffffffffff}) 14:08:16 executing program 1: r0 = socket(0xa, 0x3, 0x2) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x1000)=nil, 0x7000) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x26) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x3, 0x1}}, 0x26) 14:08:16 executing program 4: r0 = socket(0x11, 0x2, 0x0) connect$packet(r0, 0x0, 0x0) 14:08:17 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x3, 0x8c, &(0x7f0000000080)=""/140, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:08:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc050565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "01dc525e"}, 0x0, 0x0, @planes=0x0}) 14:08:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 14:08:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xf0ff7f) 14:08:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x25, 0x0, &(0x7f0000000140)=0x1008) 14:08:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x71, 0x0, &(0x7f0000000580)) 14:08:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) 14:08:17 executing program 4: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 14:08:18 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'macvtap0\x00', @ifru_ivalue}) 14:08:18 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000080)={'geneve0\x00', @ifru_data=0x0}) 14:08:18 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 14:08:18 executing program 1: prctl$PR_SET_PTRACER(0x17, 0xffffffffffffffff) 14:08:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 14:08:18 executing program 4: mount$fuseblk(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 14:08:18 executing program 5: r0 = socket$can_raw(0x2, 0xa, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8953, &(0x7f0000000000)={'batadv0\x00'}) 14:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd}) 14:08:18 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x25, 0x0, &(0x7f0000000240)) 14:08:18 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/141, 0x8d) syz_open_dev$video(0x0, 0x0, 0x28980) r1 = syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x0, 0x384, 0x0, 0x2}) 14:08:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x9, 0x0, &(0x7f0000000580)) 14:08:19 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'system.', 'msdos\x00'}, 0x0, 0x0) 14:08:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x9, 0x0, &(0x7f0000000140)=0x1008) 14:08:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x8, &(0x7f0000000080), 0xe) 14:08:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$isdn_base(r0, 0x0, 0x0) 14:08:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x8981, &(0x7f0000000040)={@private1, @empty, @mcast1}) 14:08:19 executing program 5: r0 = socket(0xa, 0x3, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x29, 0x24, 0x0, 0x0) 14:08:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@empty, @broadcast, @loopback}, 0xc) 14:08:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x14, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 14:08:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:08:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x12, 0x0, &(0x7f0000000580)=0x300) 14:08:20 executing program 5: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) 14:08:20 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @multicast}, 0x8, {0x2, 0x0, @dev}}) 14:08:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x1a, 0x0, &(0x7f0000000580)) 14:08:20 executing program 2: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f0000000040)) 14:08:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, r1, 0x3, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x8, @private2}]}, 0x38}}, 0x0) 14:08:20 executing program 0: pipe(&(0x7f0000001400)={0xffffffffffffffff}) read$qrtrtun(r0, &(0x7f0000001000)=""/116, 0x5c5b677c46cf7f73) 14:08:20 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000049c0)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @empty}}}, 0x108) 14:08:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 14:08:21 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xa}, @NL80211_ATTR_NETNS_FD, @NL80211_ATTR_WDEV, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0xfffffffffffffc47}, @NL80211_ATTR_PID={0x8}]}, 0x44}}, 0x0) 14:08:21 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 14:08:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000e98c33"], 0x2c}], 0x1}, 0x0) 14:08:21 executing program 5: r0 = socket(0xa, 0x3, 0x6) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa}, 0x18, &(0x7f0000000240)={0x0}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x40000042) [ 1454.194803][T29146] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 14:08:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f000000b000/0x4000)=nil, 0x104000, 0x4, 0x11, r1, 0x0) [ 1454.281828][T29149] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1454.355691][T29151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36073 sclass=netlink_route_socket pid=29151 comm=syz-executor.2 14:08:21 executing program 3: r0 = syz_io_uring_setup(0x13eb, &(0x7f00000010c0), &(0x7f0000e91000/0x1000)=nil, &(0x7f0000e1c000/0x4000)=nil, &(0x7f0000001140), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 14:08:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f00000001c0)={'gretap0\x00', 0x0}) 14:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) 14:08:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x41, 0x0, 0x0) 14:08:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x4, 0x3, 0x223}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 14:08:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) 14:08:22 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0xc0045009, &(0x7f0000000080)) 14:08:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x70, 0x0, &(0x7f0000000140)=0x1008) 14:08:22 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, r1, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0x20000000}], 0x24000, &(0x7f0000000100)={[], [{@euid_eq={'euid'}}]}) 14:08:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:08:23 executing program 4: r0 = socket(0xa, 0x3, 0x6) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa}, 0x18, &(0x7f0000000240)={0x0}}, 0xfc00) 14:08:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x89a0, &(0x7f0000000000)) 14:08:23 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa40) read$alg(r0, 0x0, 0x0) 14:08:23 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCADDRT(r0, 0x2, &(0x7f0000000040)={0x0, @nfc, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, @l2tp={0x2, 0x0, @multicast2}}) 14:08:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x36, 0x0, 0x4) 14:08:23 executing program 4: rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x9000}) 14:08:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0xd, 0x0, &(0x7f0000000580)) 14:08:24 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffffffffffe9c) 14:08:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x27, 0x0, &(0x7f0000000240)) 14:08:24 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@remote}, 0x0, @in6=@dev}}, 0x3) 14:08:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfd5}, 0x40) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x8912, &(0x7f0000000040)) 14:08:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$qrtr(r0, &(0x7f0000000000), 0xc) 14:08:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x0) 14:08:24 executing program 3: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 14:08:24 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 14:08:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x3, &(0x7f0000000080), 0xe) 14:08:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x7c, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:25 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:08:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x8, 0x0, &(0x7f0000000580)=0x300) 14:08:25 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @multicast}, 0x0, {0x2, 0x0, @dev}}) 14:08:25 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000001700)={@link_local, @local, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}}}, 0x0) 14:08:25 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) 14:08:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x24}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 14:08:25 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x7, 0x0, &(0x7f0000000240)) 14:08:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') ioctl$PPPIOCSPASS(r0, 0x5421, 0x0) 14:08:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='sessionid\x00') ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={0x0}}, 0x0) 14:08:25 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x20000108) 14:08:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000006c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) 14:08:26 executing program 4: write$nbd(0xffffffffffffffff, 0x0, 0x0) 14:08:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f00000007c0)=@hopopts={0x0, 0xd4, [], [@generic={0x0, 0x7, "1ff5fa0b4760ac"}, @generic={0x0, 0x695, "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"}]}, 0x6a8) 14:08:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:08:26 executing program 3: sysinfo(&(0x7f0000000000)=""/124) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x74, 0x0, 0x8dffffff}, 0x2000000c, &(0x7f0000000140)={0x0}}, 0x0) 14:08:26 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x30, &(0x7f0000000000)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x100000000000400}}, {{@in=@remote}, 0x0, @in=@loopback}}, 0xe8) 14:08:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 14:08:26 executing program 1: r0 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') bind$qrtr(r0, &(0x7f0000000040)={0x2}, 0x24) 14:08:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x4, 0x3, 0x223}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d00), 0x0, 0x7, r0}, 0x38) 14:08:27 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x70e, 0x20001) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 14:08:27 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x5, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x10) 14:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x10}, 0x18}}, 0x0) 14:08:27 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x5452, &(0x7f0000000000)={@ipv4={[], [], @broadcast}}) 14:08:27 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/core\x00') ioctl$PPPIOCSPASS(r0, 0x5421, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1006) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @private}, @xdp, @ax25={0x3, @bcast}, 0xa5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='vlan0\x00'}) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x9b64) [ 1460.090995][T29305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:08:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 14:08:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x6, 0x17, 0x0, 0xffffffffffffffff) 14:08:27 executing program 4: ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)={0x1, 0x4, [{0x8}]}) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x6, &(0x7f0000001400)=[{&(0x7f00000000c0)="59911929d5844096a217f16cb5aecb6d77fc9f33a50aa9c1b3caf8fbb7460ed38cba25a74a1c8b7c3dee3b3c7e8682a45d14b8351eecd2aa244f639dc9d7cb4eed0ee601df6afd012823261344422784cbddda7d069dda3286a536311aa678401325967b1e0a2d53f80909753779fa43f8f599e6598940709c2692031284fa7c71cda78e2c7eff2b7c99dd93b04b3060a9e7ce83bf", 0x95, 0x40}, {&(0x7f0000000180)="6e87bcf432492a4fb26ccd2ece3008f2008897b57e14de98480731dc7206e7d75cba7a7ed3a4e81a60fcc5b26daedc655724cd5ac06a1227010d3b7ab24e234aea0c1b05f7f5ea73df12366997a5b22bdc1f54424301ea37972484fb97d839b7a9183a431981545ab501f791a765d0d202b198993e639881093e3a858ba2ee0a7a11e946", 0x84}, {&(0x7f0000000240)="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", 0x1000, 0x7d}, {&(0x7f0000001240)="a69677776f3288264a25909b6b9d747787a1754c2a87e9cc7d7b", 0x1a, 0xffffffff}, {&(0x7f0000001280)="39f7b490ebe76907f89e16e8d166794644a0a688c0fd70d1dc9e6bc445a7a9197e40e4e1a2a497ef9529a22f7132827cd8c727da185dcf34832c02c6454842dd6254ee87e4d95fbc4c228f7ddf4ac05f2238ebb5f5c7d2d8e67918c40516fd8ccc6ee85386f70801adf897a7029c09595591fbcb37e9fb56596b1cc169211936ffcccc12febaafc79ff25f66d7e7e32a3df85024fdf5b1e320a9d2fc8839104d72ca66edd340f9324a61b78c2500b0856b5ad9", 0xb3, 0x7f}, {&(0x7f0000001340)="957b393e5bf537ce00c5dd10380ba7c214a6f6285e07033d30177f5a30fbedc5ead3f4bce33e0efed1c76df1020541b935f782b4568759b186994baa329e75680baf06f32dde946d65a2b0bc53e23cf3c767d90f5114b2ce7d830eaa39bf96f78b51ae251db7f34e49aa5e40f7b7fef1ca366b5f03fee12f3173ab6da5da707b33291094effb5c39420d7ea3ff0cfa7ac912a24e84e2f9caa891046ab80a8c51306befdd2efb5fa9e94d82e9bca45df7de4005ba74073902", 0xb8, 0xda}], 0x18026, &(0x7f00000014c0)={[{@nls={'nls', 0x3d, 'cp866'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask', 0x3d, 0x40}}, {@nls={'nls', 0x3d, 'cp1250'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+\xcb!^$/(,\',-:-,%'}}, {@obj_user={'obj_user', 0x3d, '&+'}}, {@subj_role={'subj_role'}}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001580)='/dev/rtc0\x00', 0x220a03, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000015c0)={0x0, 0x1, {0x15, 0x22, 0xd, 0x9, 0x7, 0x0, 0xffff, 0x128, 0x1}}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000001640)={0x1, 0x0, {0x2, 0x31, 0x11, 0x1c, 0xb, 0x5, 0x3, 0x20, 0x1}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x4040, 0x102, 0x8}, 0x18) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) 14:08:27 executing program 0: r0 = socket(0x1e, 0x80002, 0x0) getsockname$ax25(r0, 0x0, &(0x7f00000001c0)) 14:08:28 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x2b, 0x0, &(0x7f0000000240)) 14:08:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xfffffffffffffd4c, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x78}}, 0x0) 14:08:28 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000280)={@link_local, @link_local, @void, {@generic={0x8864}}}, 0x0) 14:08:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:08:28 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x30, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@remote}, 0x0, @in6=@dev}}, 0x200000e8) 14:08:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0xffffffdc) 14:08:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x401054d5, 0x0) 14:08:28 executing program 2: socketpair(0x9, 0x0, 0x0, &(0x7f0000000300)) 14:08:28 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531102}) timer_create(0x2, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000007c0)={{0x0, 0x989680}, {0x0, r1+60000000}}, &(0x7f0000000800)) 14:08:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)=0xad) 14:08:28 executing program 0: r0 = socket$can_raw(0x2, 0xa, 0x300) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 14:08:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89ed, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) 14:08:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x24}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 14:08:29 executing program 1: bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001500)={0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f0000000300)="12e940d52d8821e4bd5b68cf9edb38819b7d7bf937ab0d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:08:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000000c0)=']', 0x1) 14:08:29 executing program 3: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0xfffffffffffffd9c) 14:08:29 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'vcan0\x00'}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800)='NLBL_UNLBL\x00') ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000fddbdf250400000008000400ac1414aa1400020000000000000000000000ffff7f000001080005000a0101001400060076657468305f746f5f626f6e6400000014000300fc000000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4004000) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000400)={@loopback, @dev={0xac, 0x14, 0x14, 0x34}, r2}, 0xc) r3 = socket(0x2, 0x6, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000001980)={0x1, 'bridge_slave_1\x00', 0x4}, 0x18) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000800)=""/4096, 0x1000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)=ANY=[@ANYBLOB="00008000f418b7556c1168c50e08c7209252b9859973af53eaa43aa7b57e50552cf750892f173155d7add841d7c062ab907f2df5417067e16379be77a15059d1cc53dbbd178b62ff68d64a68211ba5971a3a706c960e253d7d1a97c31d21d5dc7f5d55bf994bfcf5495aacfa9cf015a0a5cd168dbad0192f3a6a35397e5777cc06928c320427257f91bc9a30658543637bbdc6a2c34ac81da333291c46", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf2500000000080009000200000008000100", @ANYRES32=r2, @ANYBLOB="06000600000005000600060001efffff07000500e85dc06bf626ddcb4ba596ed54bfe2d27fd860d376001291834eea8616e783bf281625959e973800de657566ef0247df", @ANYRES32, @ANYBLOB="080002000000000008000800030000000600060001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x1) r4 = socket(0x1a, 0x3, 0x40006) r5 = socket(0x2, 0x6, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000000)={'vcan0\x00'}) getsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f0000000240)={@dev, @multicast2}, &(0x7f0000000280)=0x8) recvfrom$inet(r3, &(0x7f0000000100)=""/66, 0x42, 0x40000122, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000440)={0x80, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x6, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, {{0x2, 0x4e22, @remote}}]}, 0x390) 14:08:29 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 14:08:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0xa, 0x0, &(0x7f0000000580)) 14:08:29 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x3, @default}) 14:08:29 executing program 5: r0 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0]) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000, 0x0) [ 1462.456194][T29365] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 14:08:30 executing program 3: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000000)) 14:08:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 14:08:30 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) [ 1462.831919][T29374] tmpfs: Unknown parameter './file0' 14:08:30 executing program 1: bpf$BPF_PROG_TEST_RUN(0x1d, &(0x7f0000001500)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:08:30 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 14:08:30 executing program 5: prctl$PR_SET_TIMERSLACK(0x1d, 0x61fa) 14:08:30 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x31, 0x0, &(0x7f0000000240)) 14:08:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000600)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0xc0, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x40) 14:08:30 executing program 0: socketpair(0x22, 0x0, 0x0, &(0x7f0000000100)) 14:08:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=ANY=[], 0x80}, 0x0) 14:08:31 executing program 5: r0 = socket(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x10f, 0x86, 0x0, 0x0) 14:08:31 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x4, 0x0, 0x0) 14:08:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:08:31 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x316142e75744c20e, 0x1000}, 0x20) 14:08:31 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x240040d8) 14:08:31 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:08:31 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000060c0)={0x2020}, 0xfffffffffffffed7) 14:08:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x6, &(0x7f00000007c0)=@hopopts={0x0, 0x0, [], [@generic]}, 0x200007d0) 14:08:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x73, 0x0, &(0x7f0000000580)=0x300) 14:08:31 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @multicast2}, {0x0, @random="daad74bccc45"}, 0x0, {0x2, 0x0, @dev}, 'bond_slave_0\x00'}) 14:08:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000080)) 14:08:32 executing program 0: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 14:08:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x74, 0x0, &(0x7f0000000580)) 14:08:32 executing program 4: bpf$BPF_GET_MAP_INFO(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0xfd3c}, 0x10) 14:08:32 executing program 1: socketpair(0x9, 0x0, 0x0, &(0x7f0000000100)) 14:08:32 executing program 2: ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) 14:08:32 executing program 0: syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_open_procfs(0x0, 0x0) syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, &(0x7f00000030c0), 0x0, 0x0) 14:08:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x75, 0x0, &(0x7f0000000580)) 14:08:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x4c, 0x0, 0x4) 14:08:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1263, 0x0) 14:08:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0xc0045003, 0x0) 14:08:33 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) 14:08:33 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x5001, 0x0) 14:08:33 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0x20000000}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='euid=', @ANYRESDEC, @ANYBLOB='\x00\x00']) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_mount_image$bfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40), 0x0, 0x0) 14:08:33 executing program 3: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x102c0) 14:08:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 14:08:33 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0xa, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x10) 14:08:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000040)) 14:08:33 executing program 5: sched_rr_get_interval(0xffffffffffffffff, 0x0) 14:08:34 executing program 3: socketpair(0x2b, 0x0, 0x0, &(0x7f00000003c0)) 14:08:34 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000001700)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @source_quench={0x12, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}}}, 0x0) 14:08:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 14:08:34 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:08:34 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$XDP_STATISTICS(r0, 0x10f, 0x7, 0x0, 0x0) 14:08:34 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_cred(r0, 0x1, 0x22, 0x0, &(0x7f0000000240)) 14:08:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x10, 0x0, &(0x7f0000000580)=0x300) 14:08:35 executing program 4: r0 = io_uring_setup(0x7c56, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 14:08:35 executing program 2: r0 = socket(0x10, 0x80002, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x0) 14:08:35 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f0000000040), 0x18, &(0x7f0000001100)={0x0}}, 0x0) 14:08:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x1}, 0x18}}, 0x0) 14:08:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x75, 0x0, 0x0) 14:08:35 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'netpci0\x00', @ifru_flags}) 14:08:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x73, 0x0, &(0x7f0000000580)) 14:08:35 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8923, &(0x7f0000000040)) 14:08:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x8, 0x0, 0x0) 14:08:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x54e3, 0x0) 14:08:35 executing program 3: r0 = socket(0x2a, 0x80002, 0x0) connect$can_j1939(r0, &(0x7f0000000000)={0x2a}, 0x18) 14:08:36 executing program 4: r0 = fanotify_init(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) fanotify_mark(r0, 0x1, 0x18, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 14:08:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$proc_mixer(r0, 0x0, 0x13) 14:08:36 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}) 14:08:36 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = io_uring_setup(0x7c56, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x20193, r0, 0x0) 14:08:36 executing program 1: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 14:08:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) 14:08:36 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 14:08:36 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed}, 0xa) 14:08:36 executing program 5: bpf$BPF_PROG_TEST_RUN(0x14, &(0x7f0000001500)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000300)="12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:08:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x7e000000, 0x0, 0x0, 0x0) 14:08:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x7, 0x0, &(0x7f0000000580)=0x300) 14:08:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x400454c8, 0x0) 14:08:37 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x81800) 14:08:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x82, 0x0, &(0x7f0000000580)=0x300) 14:08:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100), 0x8) 14:08:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x71, 0x0, &(0x7f0000000580)=0x300) 14:08:37 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5460, 0x0) 14:08:37 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0xae, 0x0, 0x0) setreuid(0xee01, 0x0) 14:08:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000040)) 14:08:38 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 14:08:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "01dc525e"}, 0x0, 0x0, @planes=0x0}) 14:08:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0) 14:08:38 executing program 0: set_mempolicy(0x1, &(0x7f0000000080)=0x20, 0x61) 14:08:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x33, &(0x7f00000007c0), 0x8) 14:08:38 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 14:08:38 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1}, 0x0) 14:08:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x76, 0x0, &(0x7f0000000580)=0x300) 14:08:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0xa, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x26) 14:08:38 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 14:08:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 14:08:39 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x4d00, 0x0) 14:08:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 14:08:39 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x10f, 0x82, 0x0, 0x0) 14:08:39 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)="16ff617528f599d1313b850316f6dea15e80717ca07167141c8373933bcf55b5278c63e3507f9b257a1d911f6c678698f7c0923b44675cfaa13406bd69e1ae0b365dbadf42f8cd7db7591a562d8242b26eb15da34e420be5ad9c145d687ee8d3d95c6730500f947d8d2a3a4a56835d38ca7f6d219c0791d081b1b402da5d485af1f28c164a260cae8a5ac30c86098149ae8ad7f3f5854f6db57f80f3b357f50148148a52be633a0606cf1f0bcf318b9b2ee1776a27f2ff5c845656fe4220a2d18d830d8df639fe24f61a126ab9f31d3e121730b2d97fcad4a65f8a278aa61301b61997b8dbf011b07d013f0567aec14729db95dc9a8558e334485652bfc6476d5543c290d1a584f2c706b53d1823bf2403f3ae693407127d19e8aa4cbae4f4eacea1af8f6b1e829b2503941c0fb8ede6d908d819b6d91ad7c8", 0xffffffffffffffd1, 0x0) 14:08:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x400, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 14:08:39 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x40081271, &(0x7f00000002c0)={[0x2, 0x2]}) 14:08:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 14:08:39 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x415100) 14:08:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x11, 0x0, 0x4) 14:08:39 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531102}) timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000007c0)={{0x0, 0x989680}, {0x0, r1+60000000}}, 0x0) 14:08:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 14:08:40 executing program 2: socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r0, 0x0, 0x0) 14:08:40 executing program 0: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100080, &(0x7f0000002340)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 14:08:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x21, 0x0, &(0x7f0000000580)) 14:08:40 executing program 5: rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000002c40)) 14:08:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x2dc74a9d8025a1b) 14:08:41 executing program 2: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x24}}, 0x0) 14:08:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0xffffffffffffffff) 14:08:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8940, &(0x7f0000000000)={@ipv4={[], [], @broadcast}}) 14:08:41 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x70e, 0x20001) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0xfffffdef) 14:08:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0xc0045009, 0x0) 14:08:41 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x80}) [ 1474.238619][T29642] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1474.266453][T29643] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 14:08:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x70, 0x0, &(0x7f0000000580)) 14:08:41 executing program 2: socketpair(0x22, 0x0, 0x9, &(0x7f0000000000)) 14:08:42 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000004, 0x4020032, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 14:08:42 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffffff, 0x0) 14:08:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x1d, &(0x7f0000000040)=[@timestamp, @sack_perm, @timestamp, @window], 0x4) 14:08:42 executing program 4: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="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", 0x171) 14:08:42 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0xc0045006, 0x0) 14:08:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:42 executing program 0: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:08:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 14:08:43 executing program 1: r0 = socket(0xa, 0x3, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x29, 0x7, 0x0, 0x0) 14:08:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x23, 0x0, 0x0) 14:08:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 14:08:43 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1615ad68d2b42045) 14:08:43 executing program 5: openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xffffffffffffff88) 14:08:43 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) 14:08:43 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x5460, 0x0) 14:08:43 executing program 3: r0 = socket(0x2, 0x6, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:08:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 14:08:43 executing program 4: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x201000, &(0x7f0000002200)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 14:08:44 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 14:08:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x43, &(0x7f00000007c0), 0x8) 14:08:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x19, 0x0, 0x4) 14:08:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x25, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x13, 0x0, 0x0) 14:08:45 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x60) 14:08:45 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, r1, 0x3, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x300, @private2}]}, 0x38}}, 0x0) 14:08:45 executing program 0: setitimer(0x0, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) setitimer(0x0, 0x0, &(0x7f00000003c0)) 14:08:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01"], 0x18}}, 0x0) 14:08:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 14:08:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x8004500f, &(0x7f0000000080)) 14:08:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, r0, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 14:08:46 executing program 4: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000200)={0x8}, &(0x7f0000000240)) [ 1478.794990][T29719] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 14:08:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0xc0045005, &(0x7f0000000080)) 14:08:46 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x70e, 0x20001) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x2, {0x0, 0x0, 0x0}}, 0xfffffdef) 14:08:46 executing program 3: r0 = socket(0x15, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) 14:08:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x15, 0x0, &(0x7f0000000580)) 14:08:46 executing program 2: r0 = socket(0x29, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40002141, 0x0, 0x0) 14:08:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x19, &(0x7f00000007c0)=@hopopts={0x0, 0x1, [], [@generic={0x0, 0x6, "1ff5fa0b4760"}]}, 0x10) 14:08:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 14:08:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x41, &(0x7f00000000c0)=@dstopts={0x0, 0x4, [], [@calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}, 0x30) 14:08:47 executing program 3: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xee819f25eb290acd, 0x0, 0x0, 0x0) 14:08:47 executing program 5: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) 14:08:47 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) 14:08:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0xd, 0x0, &(0x7f0000000580)=0x300) 14:08:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:08:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @broadcast}}) 14:08:48 executing program 3: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 14:08:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x4c, 0x0, 0x0) 14:08:48 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x36, &(0x7f0000000000)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, 0xe8) 14:08:48 executing program 0: r0 = eventfd2(0xf5c, 0x80001) read$eventfd(r0, &(0x7f0000000040), 0x8) 14:08:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x1c, 0x0, &(0x7f0000000580)=0x300) 14:08:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') 14:08:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), 0x4) 14:08:48 executing program 0: r0 = socket(0xa, 0x3, 0x6) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 14:08:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x9, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev}, 0x10) 14:08:49 executing program 4: r0 = socket(0x25, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x200400c0) 14:08:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x8000000007}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfd3c}, 0x10) 14:08:49 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8981, &(0x7f0000000080)={'geneve0\x00', @ifru_data=0x0}) 14:08:49 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x12, &(0x7f0000000000)={{{@in=@broadcast, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, 0xe8) 14:08:49 executing program 3: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8993, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 14:08:49 executing program 1: sysinfo(&(0x7f0000000000)=""/124) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x74}, 0x2000000c, &(0x7f0000000140)={0x0}}, 0x0) 14:08:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x801) mmap$binder(&(0x7f000000b000/0x4000)=nil, 0x104000, 0x4, 0x11, r0, 0x0) 14:08:50 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 14:08:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8971, &(0x7f00000003c0)={'sit0\x00', 0x0}) 14:08:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc0045516, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:08:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x29, 0x3, 0x0, 0x3) 14:08:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$proc_mixer(r1, 0x0, 0x13) read$proc_mixer(r0, &(0x7f0000000040)=""/4096, 0x1000) 14:08:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$qrtr(r0, 0x0, 0x0) 14:08:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x10, 0x0, 0x0) 14:08:50 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x0) read$dsp(r0, &(0x7f0000000140)=""/228, 0x20000224) 14:08:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 14:08:50 executing program 2: r0 = socket(0xf, 0x3, 0x2) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:08:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x72, 0x0, &(0x7f0000000580)) 14:08:51 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xf0ff7f}}, 0x0) 14:08:51 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x80402) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) 14:08:51 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 14:08:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x4, 0x0, &(0x7f0000000140)=0x3) 14:08:51 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$x25(r0, 0x0, 0x803e, 0x60ff, 0x0, 0x0) 14:08:51 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x400889c, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 14:08:51 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') 14:08:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @broadcast}}) 14:08:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000000c0)=@dstopts, 0x8) 14:08:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x1d, 0x0, &(0x7f0000000580)=0x300) 14:08:52 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 14:08:52 executing program 1: r0 = socket(0xa, 0x3, 0x6) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa, 0x0, 0x0, {}, 0x60}, 0x18, &(0x7f0000000240)={0x0}, 0x7e}, 0x0) 14:08:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8980, &(0x7f0000000080)={'sit0\x00', 0x0}) 14:08:52 executing program 3: prctl$PR_SET_PTRACER(0x18, 0xffffffffffffffff) 14:08:52 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCADDRT(r0, 0x8982, 0x0) 14:08:52 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x47524247, 0x0, @stepwise}) 14:08:52 executing program 0: r0 = socket(0x18, 0x0, 0x1) connect$inet6(r0, 0x0, 0x0) 14:08:53 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$isdn(r0, 0x0, 0x0) 14:08:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x800454cf, 0xfffffffffffffffd) 14:08:53 executing program 3: bpf$BPF_PROG_TEST_RUN(0x17, 0x0, 0x0) 14:08:53 executing program 2: r0 = fanotify_init(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x18, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 14:08:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x5008, 0x0) 14:08:53 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x0) 14:08:53 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 14:08:53 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531102}) timer_create(0x0, 0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000007c0)={{0x0, 0x989680}, {0x0, r1+60000000}}, &(0x7f0000000800)) 14:08:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x5421, 0xfffffffffffffffd) 14:08:54 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80001, 0x0) read$FUSE(r0, 0x0, 0x0) 14:08:54 executing program 4: socketpair(0x24, 0x0, 0x0, &(0x7f0000000100)) 14:08:54 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) 14:08:54 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000100)) 14:08:54 executing program 3: r0 = socket(0x15, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 14:08:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c63000004630440020000000c63000004630440010000c1ffffff40"], 0x0, 0x0, 0x0}) 14:08:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x464, 0x1, 0x1}, 0x40) 14:08:54 executing program 4: r0 = socket(0x15, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40002141, 0x0, 0x0) 14:08:54 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, 0x0, 0x0) [ 1487.486931][T29918] binder: 29916:29918 unknown command 1090519039 [ 1487.493739][T29918] binder: 29916:29918 ioctl c0306201 20000140 returned -22 14:08:55 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000080)) 14:08:55 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @broadcast}, 0x3e, {0x2, 0x0, @dev}, 'ipvlan0\x00'}) 14:08:55 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$isdn(r0, &(0x7f0000000000), 0x6) 14:08:55 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 14:08:55 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000020c0)={0x2b, 0x3, 0x0, {0x0, 0x0, 0x45}}, 0x2b) 14:08:55 executing program 4: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 14:08:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3801"], 0x38}}, 0x0) 14:08:55 executing program 1: r0 = socket(0x2, 0x6, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x500}}, 0x0) 14:08:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x8912, &(0x7f0000000000)) 14:08:56 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000080)) 14:08:56 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, r1, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10, 0x0, r2}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r4 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000204,uid=', @ANYRESHEX=r4]) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0x20000000}], 0x24000, &(0x7f0000000100)={[], [{@euid_eq={'euid'}}]}) 14:08:56 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:08:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f00000007c0), 0x8) 14:08:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x12, 0x0, &(0x7f0000000580)) 14:08:56 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20001) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0xfffffdef) 14:08:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x16, 0x0, 0x0) 14:08:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x64, 0x0, 0x0) 14:08:56 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000008580)={0x2020}, 0xffffffffffffff38) 14:08:56 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={0x0}}, 0x0) 14:08:57 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1489.825035][T29976] tmpfs: Unknown parameter '€' 14:08:57 executing program 5: r0 = getpgid(0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r0, 0x6, 0xffffffffffffffff, 0x0) 14:08:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00'}}) 14:08:57 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000380)) 14:08:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x78, 0x0, 0x0) 14:08:57 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 14:08:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none}, 0xa) 14:09:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 14:09:14 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x50) 14:09:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x7d, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:09:14 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) 14:09:14 executing program 0: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 14:09:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0) 14:09:15 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x0) 14:09:15 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "bceabba6ad355ba839f66392b5ce1b87e0a24a1198d9582840cc6292c87fda1733b642c37d6827bea5207233e4cd192f9afb45dea4b36b529c559d9437b880c5"}}, 0x80}}, 0x0) 14:09:15 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x8b81, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 14:09:15 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:09:15 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x2b, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@remote}, 0x0, @in6=@dev}}, 0x200000e8) 14:09:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f4, &(0x7f00000003c0)={'sit0\x00', 0x0}) 14:09:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x76, 0x0, 0x0) 14:09:15 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x140a, 0x1}, 0x10}}, 0x0) 14:09:15 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000000)) 14:09:15 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(r0, 0x0, &(0x7f0000001800)) 14:09:15 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, 0x0, 0x0) 14:09:16 executing program 5: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 1508.636195][T30044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=30044 comm=syz-executor.4 14:09:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x11, &(0x7f00000007c0)=@hopopts={0x33}, 0x8) 14:09:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @broadcast}}) 14:09:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0x400454d0, 0x0) ioctl$KVM_SET_REGS(r2, 0x40049409, 0x0) 14:09:16 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x70e, 0x20001) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x20000148) 14:09:16 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 14:09:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 14:09:16 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r0, 0x0, 0x3}) 14:09:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x400454e2, 0x0) 14:09:16 executing program 0: getuid() 14:09:17 executing program 4: setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0xffffffffffffffb9) 14:09:17 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) [ 1509.649425][T30070] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 1509.747348][T30077] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 14:09:17 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x7c, 0x0, &(0x7f0000000580)) 14:09:17 executing program 5: socketpair(0x1, 0x0, 0xff, &(0x7f0000002a40)) 14:09:17 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8901, &(0x7f0000000040)) 14:09:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x7b, 0x0, &(0x7f0000000580)=0x300) 14:09:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000000)={{{@in=@broadcast, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, 0xe8) 14:09:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') read$FUSE(r0, 0x0, 0x0) 14:09:17 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000b80)=[{0x20, 0x0, 0x0, 0xfffff000}]}) 14:09:18 executing program 5: set_mempolicy(0x4003, &(0x7f0000000140)=0x100000001, 0x7742) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30004000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x4}}]}, 0x38}}, 0x0) 14:09:18 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'tunl0\x00', 0x0}) 14:09:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x894c, 0x0) 14:09:18 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_ENTRY(r0, &(0x7f00000001c0)={0x90}, 0x90) 14:09:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) [ 1511.025757][T30111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:09:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) [ 1511.216142][T30116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:09:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc0405519, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:09:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x180, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) 14:09:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 14:09:18 executing program 5: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 14:09:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) 14:09:19 executing program 3: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}) 14:09:19 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002400)='/dev/cuse\x00', 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 14:09:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) 14:09:19 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x500e, 0x0) 14:09:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x31, &(0x7f00000007c0), 0x8) 14:09:19 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x6b) 14:09:19 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000001700)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @source_quench={0x14, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}}}, 0x0) 14:09:19 executing program 2: rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x8}) 14:09:19 executing program 0: socketpair(0x23, 0x0, 0x40, &(0x7f0000000000)) 14:09:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) connect$bt_sco(r0, 0x0, 0x0) 14:09:20 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x300, 0x0, 0x0) 14:09:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x70, 0x0, &(0x7f0000000580)=0x300) 14:09:20 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000000)={'batadv0\x00'}) 14:09:20 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x22, 0x0, 0x300) 14:09:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) 14:09:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x41, 0x8000019, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00') 14:09:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000100)=0x8) 14:09:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @local}, &(0x7f0000000100)=0x1) 14:09:21 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$x25(r0, &(0x7f0000000400)={0x9, @null=' \x00'}, 0x12) 14:09:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) 14:09:21 executing program 0: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 14:09:21 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x10f, 0x4, 0x0, 0x0) 14:09:21 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 14:09:21 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x0, &(0x7f0000000bc0)={0x0, 0x0}) 14:09:21 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 14:09:21 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r1, 0x0, r2}) 14:09:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffc01, 0x4) 14:09:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000100)={0xa, @none}, 0x8) 14:09:21 executing program 2: r0 = getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x220880, 0x0) 14:09:21 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000000)="6c7c9f5385f1771e17d72993950f7e81477655c07c65e2d50d0162581a2687cddddd2fadd89319b0e90fa9e75851b6b864e591a5d8c3afdf81222f2574eef8784cfca74c231f71e779d25d51e3f7f861a0d328c22bce54c16a1cb1c8d22e94c12337b0262c0d7194c659bc3c6fe67d09c754c407e7d6b38349d77b276aab51012110a5309639af65240fe878dfb9496aa1305f357da8d21b20d8d4818b75f9eba5a3f0c466b5561191ab81b97628f656f5cacedf171d25ede22855764ed0d7ffcf540ed8c7b2913ee214e5bc917d2015237be555ebd2d47cb2700ef17a594b07c5e504a784fd6f30971d5ccbe92a6244e710cb9bf5f9c04a143defc3b0ac1c0e9f5831733477f32d40dbaf3a6d7e8c4309a72ad39cd00f141154407e350f479a8c6c0fdd0ab673b70cf143529c7dde1e4b026bb56d372aec15d7b5038478da0c56bf0c20bdfcd7c4299db488ece232dca6ba334b02395d25a8f0da09b5cd0d479e895e9c1e66dd60a1375f9bd3643863d65adec6ce60d4d60d56fa6d8eeeb366683968d50b07903e4ad950291dd36a8f3a5d7aaeefabf9e5f0fa3fafb21a9dda0b2a169bfd312649b332019a96928424143056b7b52098fa26177afb0e80ad1360d3ceb41f36e5a10bf2a46745480d11ade6c64e2b32a5aa175be0349643f94e08b2343cf022b77f336a388b905af5e6ac2f541ef59b6f3876af952be524de05c495b66f6f5ca830e35c27d8b1958bafd74e0ee9b2eed6904ae48f426a37c0d416423cccf9a369f5fff0d469d729e4ceb2f7f02ee3ac2ad6a4fb2a56f6be68a9fae1ea7dbf9a8c99469441767a4a23a2702c52801f4168ce97b3a33a889aab9e58460db93c795775fdd2837019344e54bdf44adb02003bea61048f7ac25a3115400608b659e810bee6b73d53bf44a7174cfade4098bbe6126079fec517154cb68ce1aa9ecd609273b84d4c22a6ab7c3ead33ed426951f3916664fad3c92b54a75cc45783c526b55f53e353eae28b89756824dab68bd3ba2f78871a0f12974a2f2153165d88db98c9b9ffd4bfeddfad9a7f67e7b2e4c33ed85707ecc30089459b899cf3bbd34cad01e4f7680c53db7ad3cf9374ce8c954a8a5938d276a988955a03e627d59b442db8a530a020c08a4ce450fb98279fcd1f1b660ee14ec32231a9b4b79f752c52dcc2f401c7138059024fb9c67cdf767fe4a1d63557f2229658c2fba29f87f8136ea8aa46ed11b915deb5458319a9894c8e68c93d50b97f60cedbc1cdd1549275b848dca5572cf7a1797d18abbc75ed83d426969cbac1cc9951fdd6581b9c3c6f7f10af1502eaa74af1f370bf2cacd72b863b64935702efb4f21bc70cd00ba847b194c8c600ce38018e2b023a8b26e39afdc2b54e50e1d996f2f2aed0fae6bd1b120509c9b037e27c26848c9c02060882c188c4f9ae87d98bb9b8c59503e5e30a0df10a59a2835685ae5acbe054a9db6b46d4185ef3768c01efdba79e4794047137567cfea018beb6994340ca34530841ee441485643763b9d954978437884a574c52869f9971a8b808ded908d595119b8b52718a2cad375e5ec6e47035ec3c1fb0c7fdfe0d0887ae4630110a8b5276cfa4b98c3989574879eaf4f8824f124df2418d589ea727e2632e81d3b2fbb400bd4c5c4407fb4dea5f4a745e02287b0f7a1d1bbad713340bef3bc12929d93bdda53e16c353508a8553e84a397e7869262fa1840de80370363e09b00f11e7d30ce43212995840c3296a16cf310af0e40ef459e479f2a20f2680ad3eed8d1092a1a42e737e088ec84c2f33b366373acf679bf579d6101b553356c967ecb2d86d36d69b7356052c6bafaa2d0a1e23631ad091ca9ab86c49d602157757008154d368bfa1b0dd960db3af09e5bb965727bd2ea00ba843e9445216115458bc7e371c4b882fa45a726399fbee54927bccc3a8e1be9d704ad9968089b2322e59593ec18286a90900d074b7911d084a1638df2796a38749e92d5a49e2945d3aef90aaefe06c0ea89b", 0x599, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:09:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x8010500c, 0x0) 14:09:22 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x40000, 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_fuse_handle_req(r0, &(0x7f0000000080)="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", 0x2000, &(0x7f0000008d80)={&(0x7f0000002080)={0x50, 0x0, 0x0, {0x7, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:09:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @broadcast, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 14:09:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:09:22 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 14:09:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000940)="b2"}) [ 1515.786134][ T28] audit: type=1326 audit(1599142163.220:92): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=30217 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f22549 code=0x7fc00000 [ 1515.810267][ T28] audit: type=1326 audit(1599142163.220:93): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=30217 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f22549 code=0x7fc00000 [ 1515.833349][ T28] audit: type=1326 audit(1599142163.220:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=30217 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f22549 code=0x7fc00000 [ 1515.857234][ T28] audit: type=1326 audit(1599142163.220:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=30217 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f22549 code=0x7fc00000 14:09:23 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = getpid() r2 = pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, 0x0) [ 1516.030732][T30252] binder: 30242:30252 ioctl c0306201 0 returned -14 [ 1516.074064][T30252] binder: 30242:30252 ioctl c0306201 20000180 returned -11 14:09:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x7a, 0x0, &(0x7f0000000580)=0x300) 14:09:23 executing program 1: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) 14:09:23 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0xc0045005, 0x0) 14:09:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0x400454ca, 0x0) [ 1516.133222][T30252] binder: 30242:30252 ioctl c0306201 0 returned -14 14:09:23 executing program 4: prctl$PR_SET_PTRACER(0x8, 0xffffffffffffffff) 14:09:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) getrusage(0xffffffffffffffff, &(0x7f00000002c0)) 14:09:24 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x13, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@remote}, 0x0, @in6=@dev}}, 0xe8) 14:09:24 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa}, 0x18, &(0x7f0000000240)={0x0, 0x61}}, 0x0) 14:09:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x1e, 0x0, 0x0) 14:09:24 executing program 5: io_setup(0x5, &(0x7f00000002c0)=0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffd}]) 14:09:24 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000004200)={'ip6tnl0\x00', 0x0}) 14:09:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x11, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:09:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private1, @local, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2910002}) 14:09:24 executing program 1: r0 = socket(0x23, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000440)) 14:09:24 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000020c0)={0x2b, 0x2, 0x0, {0x0, 0x0, 0x45}}, 0x2b) 14:09:25 executing program 3: r0 = socket(0x15, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x4101, 0x0, 0x0) 14:09:25 executing program 5: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000001040)='8', 0x1}, {&(0x7f0000001100)="0e", 0x1}], 0x3}, 0x0) 14:09:25 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, &(0x7f0000000000)={'vxcan1\x00'}) 14:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 14:09:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x1) 14:09:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) 14:09:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x2, 0x0, 0x0) 14:09:25 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 14:09:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 14:09:26 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531102}) userfaultfd(0x0) 14:09:26 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f00000008c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, 0xe}) 14:09:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x7b, 0x0, 0x0) 14:09:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x21, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)=0x1008) 14:09:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x308000, &(0x7f0000000340)=ANY=[]) 14:09:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x8, 0x0, &(0x7f0000000580)) 14:09:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x1a, 0x0, 0x0) 14:09:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc008551b, 0x0) 14:09:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)=0x2) 14:09:26 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) 14:09:26 executing program 5: bpf$BPF_PROG_TEST_RUN(0x8, &(0x7f0000001500)={0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f0000000300)="12e940d52d8821e4bd5b68cf9edb38819b7d7bf937ab0dfb10ab95737ba35353dba658ddc248", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:09:26 executing program 3: r0 = socket(0xa, 0x3, 0x6) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa}, 0x18, &(0x7f0000000240)={0x0}}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x40000042) 14:09:27 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) 14:09:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000000)=0x2000be7) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) socket$kcm(0xa, 0x0, 0x11) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040)=0x8) 14:09:27 executing program 1: readlink(&(0x7f0000000100)='./file2/file1\x00', 0x0, 0x0) 14:09:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x19, 0x0, 0x0) 14:09:27 executing program 2: socket(0x1, 0x0, 0x3446) 14:09:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f00000002c0)) 14:09:27 executing program 4: 14:09:28 executing program 1: 14:09:28 executing program 3: 14:09:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x1e8, 0x22a, 0x240, 0x1e8, 0x240, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={[], [], @loopback}, [], [], 'ip6gretap0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x3}}}}, {{@uncond, 0x300, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ada02a7ff705a270349da126bc2794a1af26c52c1995261008609c20f08e5a614a82c4e0e7f0773fd73fed8fa20145d19614fb6adb71cdc9e2b24dd4cfa3f91d"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 14:09:28 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001d0025c5ffffff080d000000020000000000000000000ac9130001000000", 0x5b}], 0x1}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x666c611dbfd5b0, 0x0) 14:09:28 executing program 4: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1}}, 0x40) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4bfdc, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={{0x1, 0x0, @descriptor="8d8625743bd68aef"}}) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB], 0x14}}, 0x0) sendmmsg(r3, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f", 0x12}, {&(0x7f0000001500)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d4", 0xb7}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)="241b471fc796f94c9b15f0c8bfd7dd4310bb98a195785cf13df1d94dedfc80495e70aba3b2a3f078576e18e106f214d3a881db9f8bbe306c3c4acde296f2a3fa9d58a66997153af730dedc8a8c5fdfcd676dc20e432ba9b4cb57b154794b3fa1b4ed2908196f8a9c", 0x80c8}, {0x0}], 0x2}}], 0x2, 0x0) 14:09:28 executing program 1: [ 1521.344764][T30379] IPVS: ftp: loaded support on port[0] = 21 [ 1521.428333][T30380] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1521.440547][T30380] device tunl0 entered promiscuous mode [ 1521.450009][T30380] device gre0 entered promiscuous mode [ 1521.459443][T30380] device gretap0 entered promiscuous mode [ 1521.467965][T30380] device erspan0 entered promiscuous mode [ 1521.476826][T30380] device ip_vti0 entered promiscuous mode [ 1521.486771][T30380] device ip6_vti0 entered promiscuous mode [ 1521.497609][T30380] device sit0 entered promiscuous mode [ 1521.508095][T30380] device ip6tnl0 entered promiscuous mode [ 1521.517857][T30380] device ip6gre0 entered promiscuous mode [ 1521.527360][T30380] device syz_tun entered promiscuous mode [ 1521.535311][T30380] device ip6gretap0 entered promiscuous mode [ 1521.543394][T30380] device bridge0 entered promiscuous mode [ 1521.552428][T30380] device vcan0 entered promiscuous mode [ 1521.558598][T30380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1521.568116][T30380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1521.577919][T30380] device bond0 entered promiscuous mode [ 1521.583691][T30380] device bond_slave_0 entered promiscuous mode [ 1521.590453][T30380] device bond_slave_1 entered promiscuous mode [ 1521.601507][T30380] device team0 entered promiscuous mode [ 1521.607875][T30380] device team_slave_0 entered promiscuous mode [ 1521.614825][T30380] device team_slave_1 entered promiscuous mode [ 1521.624495][T30380] device dummy0 entered promiscuous mode [ 1521.634004][T30380] device nlmon0 entered promiscuous mode 14:09:29 executing program 0: 14:09:29 executing program 3: 14:09:29 executing program 2: 14:09:29 executing program 1: 14:09:29 executing program 2: 14:09:29 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000000)={{{@in6=@private1, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, 0xe8) 14:09:29 executing program 1: [ 1522.683278][T30380] device caif0 entered promiscuous mode [ 1522.689261][T30380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:09:30 executing program 2: 14:09:30 executing program 1: 14:09:32 executing program 5: 14:09:32 executing program 4: 14:09:32 executing program 3: 14:09:33 executing program 0: 14:09:33 executing program 2: 14:09:33 executing program 1: 14:09:33 executing program 5: 14:09:33 executing program 3: 14:09:33 executing program 4: 14:09:33 executing program 1: 14:09:33 executing program 2: 14:09:33 executing program 4: 14:09:33 executing program 5: 14:09:33 executing program 3: 14:09:33 executing program 0: 14:09:34 executing program 1: 14:09:34 executing program 2: 14:09:34 executing program 4: 14:09:34 executing program 3: 14:09:34 executing program 5: 14:09:34 executing program 0: 14:09:34 executing program 1: 14:09:34 executing program 4: 14:09:34 executing program 2: 14:09:34 executing program 3: 14:09:34 executing program 5: 14:09:34 executing program 0: 14:09:35 executing program 1: 14:09:35 executing program 2: 14:09:35 executing program 4: 14:09:35 executing program 3: 14:09:35 executing program 5: 14:09:35 executing program 0: 14:09:35 executing program 1: 14:09:35 executing program 2: 14:09:35 executing program 4: 14:09:35 executing program 3: 14:09:35 executing program 5: 14:09:36 executing program 0: 14:09:36 executing program 1: 14:09:36 executing program 2: 14:09:36 executing program 5: 14:09:36 executing program 3: 14:09:36 executing program 4: 14:09:36 executing program 0: 14:09:36 executing program 1: 14:09:36 executing program 2: 14:09:36 executing program 3: 14:09:37 executing program 5: 14:09:37 executing program 4: 14:09:37 executing program 0: 14:09:37 executing program 2: 14:09:37 executing program 1: 14:09:37 executing program 3: 14:09:37 executing program 5: 14:09:37 executing program 4: 14:09:37 executing program 0: 14:09:37 executing program 2: 14:09:38 executing program 1: 14:09:38 executing program 3: 14:09:38 executing program 5: 14:09:38 executing program 4: 14:09:38 executing program 0: 14:09:38 executing program 2: 14:09:38 executing program 1: 14:09:38 executing program 3: 14:09:38 executing program 5: 14:09:38 executing program 4: 14:09:39 executing program 0: 14:09:39 executing program 2: 14:09:39 executing program 3: 14:09:39 executing program 1: 14:09:39 executing program 4: 14:09:39 executing program 5: 14:09:39 executing program 0: 14:09:39 executing program 2: 14:09:39 executing program 1: 14:09:39 executing program 3: 14:09:40 executing program 5: 14:09:40 executing program 4: 14:09:40 executing program 0: 14:09:40 executing program 2: 14:09:40 executing program 1: 14:09:40 executing program 3: 14:09:40 executing program 5: 14:09:40 executing program 4: 14:09:40 executing program 0: 14:09:40 executing program 2: 14:09:40 executing program 3: 14:09:40 executing program 5: 14:09:40 executing program 1: 14:09:41 executing program 4: 14:09:41 executing program 0: 14:09:41 executing program 2: 14:09:41 executing program 3: 14:09:41 executing program 5: 14:09:41 executing program 1: 14:09:41 executing program 4: 14:09:41 executing program 0: 14:09:41 executing program 3: 14:09:41 executing program 2: 14:09:41 executing program 5: 14:09:42 executing program 1: 14:09:42 executing program 4: 14:09:42 executing program 0: 14:09:42 executing program 3: 14:09:42 executing program 2: 14:09:42 executing program 1: 14:09:42 executing program 5: 14:09:42 executing program 0: 14:09:42 executing program 4: 14:09:42 executing program 3: 14:09:42 executing program 2: 14:09:42 executing program 1: 14:09:43 executing program 5: 14:09:43 executing program 0: 14:09:43 executing program 4: 14:09:43 executing program 3: 14:09:43 executing program 2: 14:09:43 executing program 1: 14:09:43 executing program 5: 14:09:43 executing program 0: 14:09:43 executing program 2: 14:09:43 executing program 3: 14:09:43 executing program 4: 14:09:43 executing program 1: 14:09:44 executing program 5: 14:09:44 executing program 0: 14:09:44 executing program 2: 14:09:44 executing program 4: 14:09:44 executing program 3: 14:09:44 executing program 1: 14:09:44 executing program 5: 14:09:45 executing program 2: 14:09:45 executing program 0: 14:09:45 executing program 3: 14:09:45 executing program 1: 14:09:45 executing program 4: 14:09:45 executing program 5: 14:09:45 executing program 0: 14:09:45 executing program 2: 14:09:45 executing program 1: 14:09:45 executing program 3: 14:09:45 executing program 4: 14:09:46 executing program 5: 14:09:46 executing program 2: 14:09:46 executing program 0: 14:09:46 executing program 1: 14:09:46 executing program 4: 14:09:46 executing program 3: 14:09:46 executing program 5: 14:09:46 executing program 2: 14:09:46 executing program 0: 14:09:47 executing program 1: 14:09:47 executing program 4: 14:09:47 executing program 2: 14:09:47 executing program 3: 14:09:47 executing program 0: 14:09:47 executing program 5: 14:09:47 executing program 1: 14:09:47 executing program 4: 14:09:47 executing program 2: 14:09:47 executing program 3: 14:09:48 executing program 0: 14:09:48 executing program 5: 14:09:48 executing program 1: 14:09:48 executing program 2: 14:09:48 executing program 4: 14:09:48 executing program 0: 14:09:48 executing program 3: 14:09:48 executing program 1: 14:09:48 executing program 5: 14:09:48 executing program 2: 14:09:48 executing program 4: 14:09:49 executing program 3: 14:09:49 executing program 0: 14:09:49 executing program 1: 14:09:49 executing program 5: 14:09:49 executing program 4: 14:09:49 executing program 2: 14:09:49 executing program 3: 14:09:49 executing program 1: 14:09:49 executing program 0: 14:09:50 executing program 5: 14:09:50 executing program 4: 14:09:50 executing program 2: 14:09:50 executing program 3: 14:09:50 executing program 1: 14:09:50 executing program 0: 14:09:50 executing program 5: 14:09:50 executing program 2: 14:09:50 executing program 4: 14:09:50 executing program 1: 14:09:50 executing program 3: 14:09:51 executing program 0: 14:09:51 executing program 1: 14:09:51 executing program 2: 14:09:51 executing program 5: 14:09:51 executing program 3: 14:09:51 executing program 4: [ 1544.534864][T18171] Bluetooth: hci3: command 0x0406 tx timeout 14:09:52 executing program 0: 14:09:52 executing program 2: 14:09:52 executing program 5: 14:09:52 executing program 1: 14:09:52 executing program 4: 14:09:52 executing program 3: 14:09:52 executing program 0: 14:09:52 executing program 2: 14:09:52 executing program 5: 14:09:52 executing program 1: 14:09:52 executing program 4: 14:09:52 executing program 3: 14:09:53 executing program 0: 14:09:53 executing program 2: 14:09:53 executing program 5: 14:09:53 executing program 1: 14:09:53 executing program 3: 14:09:53 executing program 4: 14:09:53 executing program 0: 14:09:53 executing program 2: 14:09:53 executing program 5: 14:09:53 executing program 1: 14:09:54 executing program 3: 14:09:54 executing program 4: 14:09:54 executing program 0: 14:09:54 executing program 2: 14:09:54 executing program 1: 14:09:54 executing program 5: 14:09:54 executing program 4: 14:09:54 executing program 3: 14:09:54 executing program 0: 14:09:54 executing program 2: 14:09:54 executing program 1: 14:09:55 executing program 5: 14:09:55 executing program 3: 14:09:55 executing program 4: 14:09:55 executing program 0: 14:09:55 executing program 2: 14:09:55 executing program 5: 14:09:55 executing program 4: 14:09:55 executing program 1: 14:09:55 executing program 3: 14:09:55 executing program 0: 14:09:56 executing program 2: 14:09:56 executing program 4: 14:09:56 executing program 5: 14:09:56 executing program 1: 14:09:56 executing program 3: 14:09:56 executing program 0: 14:09:56 executing program 2: 14:09:56 executing program 4: 14:09:56 executing program 5: 14:09:56 executing program 1: 14:09:56 executing program 3: 14:09:57 executing program 0: 14:09:57 executing program 2: 14:09:57 executing program 4: 14:09:57 executing program 5: 14:09:57 executing program 1: 14:09:57 executing program 0: 14:09:57 executing program 3: 14:09:57 executing program 2: 14:09:57 executing program 4: 14:09:57 executing program 5: 14:09:57 executing program 1: 14:09:58 executing program 0: 14:09:58 executing program 3: 14:09:58 executing program 2: 14:09:58 executing program 5: 14:09:58 executing program 4: 14:09:58 executing program 1: 14:09:58 executing program 2: 14:09:58 executing program 0: 14:09:58 executing program 3: 14:09:58 executing program 4: 14:09:58 executing program 5: 14:09:58 executing program 1: 14:09:59 executing program 2: 14:09:59 executing program 3: 14:09:59 executing program 0: 14:09:59 executing program 4: 14:09:59 executing program 5: 14:09:59 executing program 2: 14:09:59 executing program 1: 14:09:59 executing program 3: 14:09:59 executing program 0: 14:09:59 executing program 4: 14:09:59 executing program 5: 14:10:00 executing program 1: 14:10:00 executing program 2: 14:10:00 executing program 3: 14:10:00 executing program 0: 14:10:00 executing program 4: 14:10:00 executing program 5: 14:10:00 executing program 2: 14:10:00 executing program 1: 14:10:00 executing program 3: 14:10:00 executing program 0: 14:10:00 executing program 4: 14:10:01 executing program 2: 14:10:01 executing program 1: 14:10:01 executing program 5: 14:10:01 executing program 3: 14:10:01 executing program 4: 14:10:01 executing program 2: 14:10:01 executing program 5: 14:10:01 executing program 0: 14:10:01 executing program 1: 14:10:01 executing program 3: 14:10:02 executing program 4: 14:10:02 executing program 5: 14:10:02 executing program 2: 14:10:02 executing program 0: 14:10:02 executing program 1: 14:10:02 executing program 3: 14:10:02 executing program 2: 14:10:02 executing program 5: 14:10:02 executing program 4: 14:10:02 executing program 0: 14:10:02 executing program 1: 14:10:02 executing program 3: 14:10:03 executing program 2: 14:10:03 executing program 5: 14:10:03 executing program 4: 14:10:03 executing program 1: 14:10:03 executing program 0: 14:10:03 executing program 3: 14:10:03 executing program 2: 14:10:03 executing program 5: 14:10:03 executing program 4: 14:10:03 executing program 0: 14:10:03 executing program 3: 14:10:03 executing program 1: 14:10:04 executing program 2: 14:10:04 executing program 5: 14:10:04 executing program 4: 14:10:04 executing program 0: 14:10:04 executing program 1: 14:10:04 executing program 3: 14:10:04 executing program 2: 14:10:04 executing program 4: 14:10:04 executing program 5: 14:10:04 executing program 1: 14:10:04 executing program 2: 14:10:05 executing program 0: 14:10:05 executing program 3: 14:10:05 executing program 4: 14:10:05 executing program 2: 14:10:05 executing program 1: 14:10:05 executing program 5: 14:10:05 executing program 0: 14:10:05 executing program 3: 14:10:05 executing program 4: 14:10:05 executing program 1: 14:10:05 executing program 2: 14:10:06 executing program 5: 14:10:06 executing program 0: 14:10:06 executing program 3: 14:10:06 executing program 4: 14:10:06 executing program 2: 14:10:06 executing program 1: 14:10:06 executing program 0: 14:10:06 executing program 5: 14:10:06 executing program 4: 14:10:06 executing program 3: 14:10:06 executing program 2: 14:10:07 executing program 1: 14:10:07 executing program 0: 14:10:07 executing program 5: 14:10:07 executing program 2: 14:10:07 executing program 4: 14:10:07 executing program 3: 14:10:07 executing program 1: 14:10:07 executing program 0: 14:10:07 executing program 2: 14:10:07 executing program 5: 14:10:07 executing program 4: 14:10:07 executing program 3: 14:10:08 executing program 1: 14:10:08 executing program 0: 14:10:08 executing program 2: 14:10:08 executing program 3: 14:10:08 executing program 4: 14:10:08 executing program 5: 14:10:09 executing program 2: 14:10:09 executing program 1: 14:10:09 executing program 0: 14:10:09 executing program 5: 14:10:09 executing program 4: 14:10:09 executing program 3: 14:10:09 executing program 2: 14:10:09 executing program 4: 14:10:09 executing program 5: 14:10:09 executing program 1: 14:10:09 executing program 3: 14:10:09 executing program 0: 14:10:10 executing program 2: 14:10:10 executing program 4: 14:10:10 executing program 5: 14:10:10 executing program 3: 14:10:10 executing program 1: 14:10:10 executing program 0: 14:10:10 executing program 2: 14:10:10 executing program 4: 14:10:10 executing program 5: 14:10:10 executing program 3: 14:10:11 executing program 0: 14:10:11 executing program 1: 14:10:11 executing program 2: 14:10:11 executing program 4: 14:10:11 executing program 5: 14:10:11 executing program 1: 14:10:11 executing program 3: 14:10:11 executing program 0: 14:10:11 executing program 2: 14:10:11 executing program 4: 14:10:11 executing program 5: 14:10:12 executing program 3: 14:10:12 executing program 1: 14:10:12 executing program 0: 14:10:12 executing program 2: 14:10:12 executing program 5: 14:10:12 executing program 4: 14:10:12 executing program 3: 14:10:12 executing program 1: 14:10:12 executing program 2: 14:10:12 executing program 0: 14:10:12 executing program 5: 14:10:13 executing program 3: 14:10:13 executing program 4: 14:10:13 executing program 2: 14:10:13 executing program 0: 14:10:13 executing program 1: 14:10:13 executing program 5: 14:10:13 executing program 4: 14:10:13 executing program 3: 14:10:13 executing program 2: 14:10:13 executing program 1: 14:10:13 executing program 0: 14:10:13 executing program 5: 14:10:14 executing program 4: 14:10:14 executing program 3: 14:10:14 executing program 2: 14:10:14 executing program 0: 14:10:14 executing program 1: 14:10:14 executing program 5: 14:10:14 executing program 4: 14:10:14 executing program 3: 14:10:14 executing program 2: 14:10:14 executing program 1: 14:10:14 executing program 0: 14:10:15 executing program 5: 14:10:15 executing program 4: 14:10:15 executing program 3: 14:10:15 executing program 0: 14:10:15 executing program 1: 14:10:15 executing program 2: 14:10:15 executing program 5: 14:10:15 executing program 3: 14:10:15 executing program 4: 14:10:15 executing program 0: 14:10:15 executing program 1: 14:10:15 executing program 2: 14:10:16 executing program 3: 14:10:16 executing program 5: 14:10:16 executing program 4: 14:10:16 executing program 0: 14:10:16 executing program 1: 14:10:16 executing program 2: 14:10:16 executing program 3: 14:10:16 executing program 4: 14:10:16 executing program 5: 14:10:16 executing program 0: 14:10:16 executing program 1: 14:10:16 executing program 2: 14:10:17 executing program 3: 14:10:17 executing program 4: 14:10:17 executing program 5: 14:10:17 executing program 0: 14:10:17 executing program 2: 14:10:17 executing program 1: 14:10:17 executing program 3: 14:10:17 executing program 4: 14:10:17 executing program 5: 14:10:17 executing program 0: 14:10:17 executing program 2: 14:10:18 executing program 1: 14:10:18 executing program 3: 14:10:18 executing program 4: 14:10:18 executing program 5: 14:10:18 executing program 0: 14:10:18 executing program 2: 14:10:18 executing program 1: 14:10:18 executing program 3: 14:10:18 executing program 5: 14:10:18 executing program 4: 14:10:18 executing program 0: 14:10:19 executing program 1: 14:10:19 executing program 2: 14:10:19 executing program 3: 14:10:19 executing program 5: 14:10:19 executing program 4: 14:10:19 executing program 1: 14:10:19 executing program 0: 14:10:19 executing program 2: 14:10:19 executing program 3: 14:10:19 executing program 4: 14:10:19 executing program 5: 14:10:20 executing program 1: 14:10:20 executing program 0: 14:10:20 executing program 2: 14:10:20 executing program 4: 14:10:20 executing program 3: 14:10:20 executing program 5: 14:10:20 executing program 1: 14:10:20 executing program 0: 14:10:20 executing program 2: 14:10:20 executing program 4: 14:10:21 executing program 3: 14:10:21 executing program 5: 14:10:21 executing program 1: 14:10:21 executing program 0: 14:10:21 executing program 2: 14:10:21 executing program 4: 14:10:21 executing program 3: 14:10:21 executing program 1: 14:10:21 executing program 0: 14:10:21 executing program 5: 14:10:21 executing program 2: 14:10:22 executing program 4: 14:10:22 executing program 3: 14:10:22 executing program 1: 14:10:22 executing program 5: 14:10:22 executing program 0: 14:10:22 executing program 2: 14:10:22 executing program 4: 14:10:22 executing program 1: 14:10:22 executing program 3: 14:10:22 executing program 0: 14:10:22 executing program 5: 14:10:22 executing program 2: 14:10:23 executing program 4: 14:10:23 executing program 3: 14:10:23 executing program 1: 14:10:23 executing program 5: 14:10:23 executing program 0: 14:10:23 executing program 2: 14:10:23 executing program 4: 14:10:23 executing program 3: 14:10:23 executing program 1: 14:10:23 executing program 5: 14:10:24 executing program 0: 14:10:24 executing program 2: 14:10:24 executing program 4: 14:10:24 executing program 3: 14:10:24 executing program 1: 14:10:24 executing program 5: 14:10:24 executing program 0: 14:10:24 executing program 2: 14:10:24 executing program 4: 14:10:24 executing program 3: 14:10:24 executing program 1: 14:10:24 executing program 5: 14:10:25 executing program 3: 14:10:25 executing program 1: 14:10:25 executing program 4: 14:10:25 executing program 2: 14:10:25 executing program 0: 14:10:25 executing program 5: 14:10:26 executing program 2: 14:10:26 executing program 1: 14:10:26 executing program 0: 14:10:26 executing program 3: 14:10:26 executing program 4: 14:10:26 executing program 5: 14:10:26 executing program 2: 14:10:26 executing program 1: 14:10:26 executing program 3: 14:10:26 executing program 5: 14:10:26 executing program 0: 14:10:26 executing program 4: 14:10:27 executing program 2: 14:10:27 executing program 1: 14:10:27 executing program 3: 14:10:27 executing program 5: 14:10:27 executing program 4: 14:10:27 executing program 0: 14:10:27 executing program 1: 14:10:27 executing program 2: 14:10:28 executing program 3: 14:10:28 executing program 4: 14:10:28 executing program 5: 14:10:28 executing program 0: 14:10:28 executing program 2: 14:10:28 executing program 1: 14:10:28 executing program 3: 14:10:28 executing program 4: 14:10:28 executing program 5: 14:10:28 executing program 0: 14:10:28 executing program 2: 14:10:28 executing program 1: 14:10:29 executing program 4: 14:10:29 executing program 3: 14:10:29 executing program 5: 14:10:29 executing program 0: 14:10:29 executing program 2: 14:10:29 executing program 1: 14:10:29 executing program 4: 14:10:29 executing program 3: 14:10:29 executing program 2: 14:10:29 executing program 0: 14:10:29 executing program 5: 14:10:30 executing program 1: 14:10:30 executing program 4: 14:10:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/122, 0x7a}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000340)=""/212, 0xd4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:10:30 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="001c4e23ffffffff00000000000000000000ff"], &(0x7f0000000200)=0x98) 14:10:30 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 14:10:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001000)={&(0x7f00000006c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 14:10:30 executing program 1: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f00000000c0), &(0x7f0000000200)=0xc) 14:10:30 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB="05000080", @ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 14:10:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 14:10:31 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 14:10:31 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000001880)=@un=@file={0xa}, 0xa) 14:10:31 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r1, r0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 14:10:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB="05", @ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 14:10:31 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) r6 = dup2(r5, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) 14:10:31 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x14, &(0x7f0000000000)={0x2, [0x1, 0x1]}, 0x8) 14:10:32 executing program 5: r0 = socket$inet6(0x1c, 0x3, 0x0) sendmsg(r0, &(0x7f0000001000)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) 14:10:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000280)=0x1000, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="f3", 0x1}], 0x1, 0x0, 0x2c}, 0x0) 14:10:32 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000001000)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000700)='`', 0x1}], 0x1}, 0x0) 14:10:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 14:10:32 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) sendto$inet(r2, 0x0, 0x5a, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 14:10:32 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000001000)={&(0x7f00000006c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000700)='`', 0x1}], 0x1, &(0x7f0000000b80)=[{0x10}, {0x10}], 0x20}, 0x100) 14:10:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x0, 0x0, 0x180}, 0x98) 14:10:32 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x29) 14:10:33 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 14:10:33 executing program 1: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r2) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x19, &(0x7f0000000140), 0x8) 14:10:33 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 14:10:33 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 14:10:33 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f00000001c0)="ca", 0x1, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 14:10:33 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x6, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x8) 14:10:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[{0x10}, {0x10}], 0x20}, 0x20180) 14:10:34 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000040)={@loopback}, 0x14) 14:10:34 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10}, {0x10}], 0x20}, 0x0) 14:10:34 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0x100, &(0x7f0000000140)={r5}, &(0x7f00000000c0)=0xb8) 14:10:34 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockname(r1, 0x0, &(0x7f0000000100)) 14:10:34 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r4, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x108, &(0x7f0000000100)={r6, 0x0, 0x1}, &(0x7f0000000140)=0x18) 14:10:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r0, r1) 14:10:35 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="c7", 0x1}], 0x1}, 0x0) 14:10:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080), 0x84) 14:10:35 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 14:10:35 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 14:10:35 executing program 5: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x10) 14:10:35 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) 14:10:36 executing program 4: r0 = socket(0x2, 0x1, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 14:10:36 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r0, r1) 14:10:36 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 14:10:36 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 14:10:36 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000001000)={&(0x7f00000006c0)=@un=@abs={0x8}, 0x8, 0x0}, 0x0) 14:10:36 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) r6 = dup2(r5, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000000)={r7}, 0x8) 14:10:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0xb) 14:10:37 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000002a80)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000002540)=[{&(0x7f0000000040)="af", 0x1}], 0x1, &(0x7f00000025c0)=[{0x10}, {0x10}], 0x20}, 0x0) 14:10:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 14:10:37 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) 14:10:37 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xf}, 0xc) 14:10:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000001180)={0x0, @in, 0x5}, 0xa0) 14:10:37 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x1c}], 0x1c}, 0x0) 14:10:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000140), 0xc) 14:10:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000)={0x0, 0x400}, 0x8) 14:10:37 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 14:10:38 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) 14:10:38 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 14:10:38 executing program 5: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000280)=0x84) 14:10:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = dup(r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, &(0x7f0000000180), &(0x7f0000000240)=0xbd) 14:10:38 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000200)=0xa0) 14:10:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 14:10:39 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 14:10:39 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) 14:10:39 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect(r1, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 14:10:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x75, &(0x7f0000000100), &(0x7f0000000140)=0x8) 14:10:39 executing program 2: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x301, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 14:10:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 14:10:39 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x3}, 0x7) 14:10:40 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 14:10:40 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x102, &(0x7f0000000100), &(0x7f0000000200)=0x8) 14:10:40 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000180)=ANY=[@ANYBLOB="1c1c4e2106000000000000000000000000000000000000000300"/125, @ANYRES32], &(0x7f0000000240)=0x98) 14:10:40 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 14:10:40 executing program 1: 14:10:40 executing program 4: 14:10:41 executing program 3: 14:10:41 executing program 0: 14:10:41 executing program 2: 14:10:41 executing program 1: 14:10:41 executing program 5: 14:10:41 executing program 4: 14:10:41 executing program 0: 14:10:41 executing program 2: 14:10:41 executing program 3: 14:10:41 executing program 1: 14:10:41 executing program 5: 14:10:41 executing program 4: 14:10:42 executing program 2: 14:10:42 executing program 0: 14:10:42 executing program 3: 14:10:42 executing program 5: 14:10:42 executing program 1: 14:10:42 executing program 4: 14:10:42 executing program 0: 14:10:42 executing program 3: 14:10:42 executing program 5: 14:10:42 executing program 2: 14:10:42 executing program 4: 14:10:42 executing program 1: 14:10:43 executing program 5: 14:10:43 executing program 2: 14:10:43 executing program 3: 14:10:43 executing program 0: 14:10:43 executing program 1: 14:10:43 executing program 4: 14:10:43 executing program 5: 14:10:43 executing program 2: 14:10:43 executing program 3: 14:10:43 executing program 0: 14:10:43 executing program 1: 14:10:44 executing program 4: 14:10:44 executing program 5: 14:10:44 executing program 2: 14:10:44 executing program 3: 14:10:44 executing program 0: 14:10:44 executing program 1: 14:10:44 executing program 4: 14:10:44 executing program 5: 14:10:44 executing program 2: 14:10:44 executing program 0: 14:10:45 executing program 3: 14:10:45 executing program 1: 14:10:45 executing program 4: 14:10:45 executing program 2: 14:10:45 executing program 5: 14:10:45 executing program 0: 14:10:45 executing program 3: 14:10:45 executing program 1: 14:10:45 executing program 2: 14:10:45 executing program 4: 14:10:45 executing program 5: 14:10:45 executing program 0: 14:10:46 executing program 2: 14:10:46 executing program 1: 14:10:46 executing program 5: 14:10:46 executing program 0: 14:10:46 executing program 3: 14:10:46 executing program 4: 14:10:47 executing program 2: 14:10:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xa) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) 14:10:47 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xe5, &(0x7f0000000340)=""/229, 0x0, 0x0, [0x68], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:10:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) 14:10:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000006540)={0x0}) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000006580)={r1}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getneigh={0x20, 0x1e, 0xb0b}, 0x20}}, 0x0) 14:10:47 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) 14:10:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) 14:10:47 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x80, 0x0}}, {{&(0x7f0000000240)=@vsock, 0x80, 0x0}}], 0x2, 0x0) 14:10:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180), 0x4) 14:10:47 executing program 4: r0 = socket$inet6(0xa, 0x80801, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080), 0x8) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x20004000) 14:10:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000006540)={0x0}) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000006580)={r1}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getneigh={0x20, 0x1e, 0xb0b}, 0x20}}, 0x0) 14:10:48 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x3f4) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 14:10:48 executing program 2: pkey_mprotect(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x0, 0xffffffffffffffff) 14:10:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xb, 0x0, &(0x7f0000000040)) 14:10:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x178, 0x0, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x7}}}, @common=@unspec=@limit={{0x48, 'limit\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'tunl0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 14:10:48 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="8b575f6729e2", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback}}}}}}}, 0x0) 14:10:48 executing program 5: r0 = socket$inet(0xa, 0x3, 0x80) sendmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 14:10:48 executing program 2: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:10:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99421f46b04fff0c935433e6691f8b25bee7df03b08db40ba73ac381dd4dea5dac863b5e2e3300bbd04055fff98a5c92c4b0b0deb44d872aa7bb025d0118d0e12363949f0f52917f95dc079f7c82a8e9eb1c1c840ec3dc93d87be6f6ed2195e8083b0c00ade4a74bd32932f9671a6ec9642e8a4fb6f987dbfeb3ffa2bee7909330daebfb1da08dc6bb6f", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 14:10:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020d000014000000000000000000000008001200000002000000000000000000060000000000000000000000000000000043d781340000000000ffffac141400ff02000000000000000000000000000105000500000000000a00000000000000ff010000000000000000002100000001000000000000000005000600008000000a"], 0xa0}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:10:48 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), 0x0}) 14:10:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') read$usbfs(r0, 0x0, 0x0) [ 1601.745336][T31626] ptrace attach of "/root/syz-executor.0"[31624] was attempted by "/root/syz-executor.0"[31626] 14:10:49 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x100}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:10:49 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/84, 0x54}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001540)=""/135, 0x87}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x2c}}, 0x0) [ 1602.010506][ T8723] usb 3-1: new low-speed USB device number 2 using dummy_hcd 14:10:49 executing program 1: unshare(0x2000400) connect$inet(0xffffffffffffffff, 0x0, 0x0) 14:10:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/wireless\x00') preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/101, 0x65}], 0x1, 0x48, 0x0, 0x0) 14:10:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) [ 1602.214892][T31638] ptrace attach of "/root/syz-executor.0"[31637] was attempted by "/root/syz-executor.0"[31638] 14:10:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1c, 0x0, &(0x7f0000000100)) [ 1602.377111][ T8723] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1602.624799][ T8723] usb 3-1: string descriptor 0 read error: -22 [ 1602.631339][ T8723] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1602.640765][ T8723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:10:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x6, @string={0x6, 0x3, "9cd92ab9"}}, 0x0, 0x0}, 0x0) [ 1602.707089][T31620] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1602.965785][ T5] usb 3-1: USB disconnect, device number 2 [ 1603.348557][ T8713] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1603.600016][ T8713] usb 4-1: Using ep0 maxpacket: 16 [ 1603.732038][ T8713] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1603.852527][ T5] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 1603.903223][ T8713] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 1603.912555][ T8713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.920694][ T8713] usb 4-1: Product: syz [ 1603.925221][ T8713] usb 4-1: Manufacturer: syz [ 1603.929966][ T8713] usb 4-1: SerialNumber: syz [ 1604.214826][ T5] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1604.282576][ T8713] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1604.468260][ T5] usb 3-1: string descriptor 0 read error: -22 [ 1604.474871][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1604.485286][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.504750][ T8713] usb 4-1: USB disconnect, device number 11 [ 1604.590838][T31620] raw-gadget gadget: fail, usb_ep_enable returned -22 14:10:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 14:10:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040)) 14:10:52 executing program 4: r0 = socket$inet(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x900}, 0x200000cc, &(0x7f0000000140)={0x0, 0x7}}, 0x0) 14:10:52 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x44000, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}}) 14:10:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x15, 0xff01, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60]}, @in6=@dev}}}, 0xb8}}, 0x0) [ 1604.730320][ T5] usb 3-1: can't set config #1, error -71 [ 1604.780266][ T5] usb 3-1: USB disconnect, device number 3 14:10:52 executing program 4: readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1148, 0x2, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4, 0x2], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 'netpci0\x00'}}}, {{@ipv6={@local, @dev, [], [], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4, @mcast1, @loopback, @remote, @loopback, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 14:10:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = inotify_init1(0x0) tee(r0, r1, 0x0, 0x0) 14:10:52 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 14:10:52 executing program 2: faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0) [ 1605.282628][T28107] usb 4-1: new high-speed USB device number 12 using dummy_hcd 14:10:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') sendfile(r0, r0, &(0x7f0000000340)=0x74000200, 0x5) [ 1605.533498][T28107] usb 4-1: Using ep0 maxpacket: 16 14:10:52 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 1605.656963][T28107] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1605.832556][T28107] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 1605.842017][T28107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.850949][T28107] usb 4-1: Product: syz [ 1605.855256][T28107] usb 4-1: Manufacturer: syz [ 1605.860291][T28107] usb 4-1: SerialNumber: syz 14:10:53 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x108, 0x0, 0x108, 0x108, 0x1d8, 0x2e0, 0x2f8, 0x2f8, 0x2f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 14:10:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb0169d210fe0b9c4e341fd03d27c12680affc7cca744c7975f94594e3cf774196781960fb71d9dea824024ce7991548d80ca9efb63cdbec5a31c9a8bf27af1a9cdc170498650419194b93b2336328a9f5b15593d5b23f42b33ab5b8449d766bec1d5579cd735e89d8eee274cf9d77e3896a8dba01a6febae3567c8dac86535", 0xcf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 14:10:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0x1c0, 0x248, 0x0, 0x178, 0x0, 0x288, 0x248, 0x248, 0x248, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, '\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, '=8'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'veth1_virt_wifi\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38, 'devgroup\x00'}, {0xc}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 14:10:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x30, 0x0, "000000400000040000000000000000000000000000020000000000000000000089506108ec5d366a0000002300000000000000000000000000002000eaffff00"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x9000000}, 0x1c) 14:10:53 executing program 1: io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr, 0xfffffffc}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 14:10:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0x198, 0x98, 0x1f0, 0x98, 0x0, 0x230, 0x288, 0x288, 0x288, 0x230, 0x4, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'ip_vti0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "3b959eac5d84c743692a0fea97b731b7387ee5ffbde33d329fad7b33b3293dd238a02501c19014fb8c1073a60cc0fa43fd80aaa91e3631d576e2dfd44634b9684ceb4bb727a59e468ebf8920fcd3eaed0ea8efa633d3eec5d08eb38b0a552ac8b34fcde5e3bc246d9e87f76e6c47e03371b00e279d7297f9632deaeca8ebcd92", 0x1d, 0x2}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'syzkaller0\x00', 'vlan0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) [ 1606.154239][T28107] usb 4-1: can't set config #1, error -71 [ 1606.177869][T28107] usb 4-1: USB disconnect, device number 12 14:10:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'lo\x00', 'team0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 1606.596364][T31743] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:10:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) 14:10:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/208, 0xd0}], 0x1, 0x0, 0x0) [ 1606.943583][ T28] audit: type=1800 audit(1599142254.317:96): pid=31748 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16358 res=0 14:10:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c05, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd2042044800000200", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"}) 14:10:54 executing program 4: 14:10:54 executing program 1: 14:10:54 executing program 5: 14:10:56 executing program 2: 14:10:56 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!\t'], 0x191) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 14:10:56 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}], 0x400000000000085, 0x0) 14:10:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 14:10:56 executing program 3: 14:10:56 executing program 5: 14:10:57 executing program 3: 14:10:57 executing program 5: 14:10:57 executing program 0: 14:10:57 executing program 4: 14:10:57 executing program 2: 14:10:57 executing program 5: 14:10:57 executing program 3: 14:10:57 executing program 0: 14:10:58 executing program 1: 14:10:58 executing program 4: 14:10:58 executing program 2: 14:10:58 executing program 5: 14:10:58 executing program 3: 14:10:58 executing program 0: 14:10:58 executing program 4: 14:10:58 executing program 5: 14:10:58 executing program 2: 14:10:58 executing program 3: 14:10:59 executing program 0: 14:10:59 executing program 1: 14:10:59 executing program 4: 14:10:59 executing program 2: 14:10:59 executing program 5: 14:10:59 executing program 3: 14:10:59 executing program 0: 14:10:59 executing program 1: 14:10:59 executing program 4: 14:10:59 executing program 2: 14:10:59 executing program 5: 14:11:00 executing program 3: 14:11:00 executing program 0: 14:11:00 executing program 1: 14:11:00 executing program 4: 14:11:00 executing program 2: 14:11:00 executing program 3: 14:11:00 executing program 5: 14:11:00 executing program 0: 14:11:00 executing program 1: 14:11:01 executing program 4: 14:11:01 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) recvmsg(r0, 0x0, 0x0) 14:11:01 executing program 3: fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:11:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="1f0dd81d1e92753e43113d17b186ec0588ac911640676e5260a74cc0da3dd4769c9e725b0572aca706516bd943227a2c46c94956bf6dbb4f80424d3fd16c2523ef5048fcd09d10990fcb1050384f162f2f552a79693f0429b1674ab4a12f381931e99295b23d6f12", 0x5000) 14:11:01 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 14:11:01 executing program 1: 14:11:01 executing program 4: 14:11:01 executing program 3: mlockall(0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 14:11:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x5, 0x6, 0x101}, 0x14}}, 0x0) 14:11:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) 14:11:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xfff0ffe0, 0x0, 0x0, "0580a677e238eeabba742e07b22b9f7961a21d"}) 14:11:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x40045566, &(0x7f0000000100)={{}, 'syz0\x00'}) 14:11:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/913], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000480)="00be99618947593b2e8cfc0b30d0", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:11:02 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 14:11:02 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$peeksig(0x21, r0, 0x0, 0x0) 14:11:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) 14:11:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000100000008001b"], 0x3c}, 0x1, 0xffffff7f}, 0x0) 14:11:03 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:03 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 14:11:04 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x8004500f, &(0x7f0000003200)) 14:11:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:04 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000280)=""/13, 0xd}, {0x0}], 0x3) 14:11:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 14:11:04 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:04 executing program 0: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00%'], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) [ 1616.768377][T31903] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1616.811096][T31903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1616.924163][T31938] bond1: (slave vlan2): making interface the new active one [ 1616.940020][T31938] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1616.950887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1617.073032][T31938] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:11:04 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={[], [], @loopback}}}) 14:11:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e37, 0x0, @ipv4={[], [], @local}}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:11:04 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) symlink(0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0x1) 14:11:05 executing program 3: syz_io_uring_setup(0x76d1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 14:11:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004c00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 14:11:05 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:05 executing program 4: unshare(0x44000600) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={[], [], @local}}}) 14:11:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) pipe(0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) 14:11:06 executing program 5: 14:11:06 executing program 3: 14:11:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, 0x0) dup2(r1, r0) 14:11:06 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1618.719304][T31989] IPVS: ftp: loaded support on port[0] = 21 [ 1618.972862][T31989] IPVS: ftp: loaded support on port[0] = 21 14:11:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x210b405, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0) [ 1619.096854][T17274] tipc: TX() has been purged, node left! 14:11:06 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) epoll_create1(0x0) 14:11:07 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0xfc5, 0x6}) 14:11:07 executing program 0: [ 1619.828852][T32047] EXT4-fs (sda1): re-mounted. Opts: (null) 14:11:07 executing program 2: 14:11:07 executing program 5: [ 1620.295350][ T28] audit: type=1326 audit(1599142267.740:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f22549 code=0x50000 14:11:07 executing program 1: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1620.478698][ T28] audit: type=1326 audit(1599142267.770:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22549 code=0x50000 [ 1620.501925][ T28] audit: type=1326 audit(1599142267.770:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22549 code=0x50000 [ 1620.524651][ T28] audit: type=1326 audit(1599142267.770:100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f22549 code=0x50000 [ 1620.547544][ T28] audit: type=1326 audit(1599142267.770:101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f22549 code=0x50000 [ 1620.570410][ T28] audit: type=1326 audit(1599142267.770:102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f22549 code=0x50000 [ 1620.595948][ T28] audit: type=1326 audit(1599142267.770:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22549 code=0x50000 [ 1620.618751][ T28] audit: type=1326 audit(1599142267.770:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22549 code=0x50000 [ 1620.641568][ T28] audit: type=1326 audit(1599142267.770:105): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22549 code=0x50000 14:11:08 executing program 0: [ 1620.664472][ T28] audit: type=1326 audit(1599142267.770:106): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22549 code=0x50000 14:11:08 executing program 2: 14:11:08 executing program 3: 14:11:08 executing program 5: 14:11:08 executing program 0: 14:11:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:08 executing program 3: [ 1622.645736][T17274] tipc: TX() has been purged, node left! 14:11:11 executing program 4: 14:11:11 executing program 2: 14:11:11 executing program 5: 14:11:11 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:11 executing program 0: 14:11:11 executing program 3: 14:11:11 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:11 executing program 3: 14:11:11 executing program 5: 14:11:11 executing program 0: 14:11:11 executing program 2: 14:11:12 executing program 4: 14:11:12 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:12 executing program 2: 14:11:12 executing program 3: 14:11:12 executing program 0: 14:11:12 executing program 5: 14:11:12 executing program 4: 14:11:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) 14:11:13 executing program 2: 14:11:13 executing program 0: 14:11:13 executing program 3: 14:11:13 executing program 5: 14:11:13 executing program 4: 14:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) 14:11:13 executing program 2: 14:11:13 executing program 0: 14:11:13 executing program 5: 14:11:13 executing program 3: 14:11:13 executing program 4: 14:11:14 executing program 2: 14:11:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) 14:11:14 executing program 0: 14:11:14 executing program 3: 14:11:14 executing program 4: 14:11:14 executing program 5: 14:11:14 executing program 2: 14:11:14 executing program 0: 14:11:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:11:14 executing program 4: 14:11:14 executing program 3: 14:11:14 executing program 5: 14:11:15 executing program 2: 14:11:15 executing program 0: 14:11:15 executing program 4: 14:11:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:11:15 executing program 3: 14:11:15 executing program 5: 14:11:15 executing program 2: 14:11:15 executing program 0: 14:11:15 executing program 4: 14:11:15 executing program 3: 14:11:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:11:16 executing program 5: 14:11:16 executing program 2: 14:11:16 executing program 0: 14:11:16 executing program 4: 14:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:11:16 executing program 3: 14:11:16 executing program 2: 14:11:16 executing program 5: 14:11:16 executing program 4: 14:11:16 executing program 0: 14:11:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:11:17 executing program 3: 14:11:17 executing program 2: 14:11:17 executing program 5: 14:11:17 executing program 4: 14:11:17 executing program 0: 14:11:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:11:17 executing program 3: 14:11:17 executing program 2: 14:11:17 executing program 5: 14:11:17 executing program 4: 14:11:18 executing program 0: 14:11:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:18 executing program 3: 14:11:18 executing program 2: 14:11:18 executing program 5: 14:11:18 executing program 4: 14:11:18 executing program 0: 14:11:18 executing program 2: 14:11:18 executing program 3: 14:11:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:18 executing program 4: 14:11:18 executing program 5: 14:11:19 executing program 0: 14:11:19 executing program 2: 14:11:19 executing program 3: 14:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:11:19 executing program 4: 14:11:19 executing program 5: 14:11:19 executing program 0: 14:11:19 executing program 2: 14:11:19 executing program 4: 14:11:19 executing program 3: 14:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x8, 0x6, 0x301}, 0x14}}, 0x0) 14:11:20 executing program 5: 14:11:20 executing program 0: 14:11:20 executing program 2: 14:11:20 executing program 4: 14:11:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x8, 0x6, 0x301}, 0x14}}, 0x0) 14:11:20 executing program 3: 14:11:20 executing program 5: 14:11:20 executing program 0: 14:11:20 executing program 2: 14:11:20 executing program 4: 14:11:20 executing program 3: 14:11:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x8, 0x6, 0x301}, 0x14}}, 0x0) 14:11:21 executing program 5: 14:11:21 executing program 0: 14:11:21 executing program 2: 14:11:21 executing program 4: 14:11:21 executing program 3: 14:11:21 executing program 1: 14:11:21 executing program 0: 14:11:21 executing program 5: 14:11:21 executing program 2: 14:11:21 executing program 4: 14:11:22 executing program 3: 14:11:22 executing program 1: 14:11:22 executing program 0: 14:11:22 executing program 5: 14:11:22 executing program 2: 14:11:22 executing program 4: 14:11:22 executing program 1: 14:11:22 executing program 3: 14:11:22 executing program 0: 14:11:22 executing program 5: 14:11:22 executing program 2: 14:11:22 executing program 4: 14:11:23 executing program 1: 14:11:23 executing program 0: 14:11:23 executing program 3: 14:11:23 executing program 2: 14:11:23 executing program 5: 14:11:23 executing program 4: 14:11:23 executing program 1: 14:11:23 executing program 3: 14:11:23 executing program 0: 14:11:23 executing program 2: 14:11:23 executing program 5: 14:11:24 executing program 4: 14:11:24 executing program 1: 14:11:24 executing program 0: 14:11:24 executing program 3: 14:11:24 executing program 4: 14:11:24 executing program 2: 14:11:24 executing program 1: 14:11:24 executing program 5: 14:11:24 executing program 0: 14:11:24 executing program 3: 14:11:25 executing program 4: 14:11:25 executing program 2: 14:11:25 executing program 5: 14:11:25 executing program 1: 14:11:25 executing program 0: 14:11:25 executing program 4: 14:11:25 executing program 3: 14:11:25 executing program 2: 14:11:25 executing program 5: 14:11:25 executing program 0: 14:11:25 executing program 1: 14:11:25 executing program 4: 14:11:26 executing program 3: 14:11:26 executing program 2: 14:11:26 executing program 5: 14:11:26 executing program 0: 14:11:26 executing program 1: 14:11:26 executing program 4: 14:11:26 executing program 3: 14:11:26 executing program 5: 14:11:26 executing program 2: 14:11:26 executing program 0: 14:11:26 executing program 4: 14:11:27 executing program 1: 14:11:27 executing program 3: 14:11:27 executing program 5: 14:11:27 executing program 2: 14:11:27 executing program 0: 14:11:27 executing program 4: 14:11:27 executing program 1: 14:11:27 executing program 3: 14:11:27 executing program 5: 14:11:27 executing program 2: 14:11:28 executing program 2: 14:11:28 executing program 5: 14:11:28 executing program 1: 14:11:28 executing program 4: 14:11:28 executing program 3: 14:11:28 executing program 0: 14:11:29 executing program 0: 14:11:29 executing program 1: 14:11:29 executing program 2: 14:11:29 executing program 5: 14:11:29 executing program 4: 14:11:29 executing program 3: 14:11:29 executing program 2: 14:11:29 executing program 1: 14:11:29 executing program 0: 14:11:29 executing program 5: 14:11:29 executing program 4: 14:11:29 executing program 3: 14:11:30 executing program 2: 14:11:30 executing program 0: 14:11:30 executing program 1: 14:11:30 executing program 5: 14:11:30 executing program 4: 14:11:30 executing program 3: 14:11:30 executing program 2: 14:11:30 executing program 0: 14:11:30 executing program 1: 14:11:30 executing program 5: 14:11:31 executing program 4: 14:11:31 executing program 2: 14:11:31 executing program 3: 14:11:31 executing program 0: 14:11:31 executing program 1: 14:11:31 executing program 4: 14:11:31 executing program 5: 14:11:31 executing program 2: 14:11:31 executing program 3: 14:11:31 executing program 0: 14:11:31 executing program 1: 14:11:32 executing program 4: 14:11:32 executing program 5: 14:11:32 executing program 2: 14:11:32 executing program 3: 14:11:32 executing program 0: 14:11:32 executing program 1: 14:11:32 executing program 4: 14:11:32 executing program 5: 14:11:32 executing program 2: 14:11:32 executing program 3: 14:11:32 executing program 1: 14:11:33 executing program 0: 14:11:33 executing program 4: 14:11:33 executing program 2: 14:11:33 executing program 5: 14:11:33 executing program 3: 14:11:33 executing program 0: 14:11:33 executing program 1: 14:11:33 executing program 4: 14:11:33 executing program 2: 14:11:33 executing program 5: 14:11:34 executing program 1: 14:11:34 executing program 3: 14:11:34 executing program 0: 14:11:34 executing program 4: 14:11:34 executing program 2: 14:11:34 executing program 5: 14:11:34 executing program 0: 14:11:34 executing program 3: 14:11:34 executing program 1: 14:11:34 executing program 4: 14:11:34 executing program 2: 14:11:35 executing program 0: 14:11:35 executing program 5: 14:11:35 executing program 3: 14:11:35 executing program 1: 14:11:35 executing program 4: 14:11:35 executing program 2: 14:11:35 executing program 5: 14:11:35 executing program 3: 14:11:35 executing program 0: 14:11:35 executing program 1: 14:11:35 executing program 4: 14:11:35 executing program 2: 14:11:36 executing program 5: 14:11:36 executing program 3: 14:11:36 executing program 0: 14:11:36 executing program 1: 14:11:36 executing program 4: 14:11:36 executing program 2: 14:11:36 executing program 3: 14:11:36 executing program 5: 14:11:36 executing program 0: 14:11:36 executing program 1: 14:11:36 executing program 4: 14:11:37 executing program 2: 14:11:37 executing program 3: 14:11:37 executing program 5: 14:11:37 executing program 0: 14:11:37 executing program 1: 14:11:37 executing program 4: 14:11:37 executing program 2: 14:11:37 executing program 3: 14:11:37 executing program 5: 14:11:37 executing program 1: 14:11:37 executing program 4: 14:11:38 executing program 0: 14:11:38 executing program 2: 14:11:38 executing program 1: 14:11:38 executing program 3: 14:11:38 executing program 5: 14:11:38 executing program 4: 14:11:38 executing program 0: 14:11:38 executing program 2: 14:11:38 executing program 3: 14:11:38 executing program 1: 14:11:39 executing program 2: 14:11:39 executing program 5: 14:11:39 executing program 4: 14:11:39 executing program 0: 14:11:39 executing program 3: 14:11:39 executing program 1: 14:11:39 executing program 2: 14:11:39 executing program 5: 14:11:39 executing program 4: 14:11:39 executing program 0: 14:11:39 executing program 3: 14:11:39 executing program 1: 14:11:39 executing program 2: 14:11:40 executing program 5: 14:11:40 executing program 0: 14:11:40 executing program 4: 14:11:40 executing program 1: 14:11:40 executing program 3: 14:11:40 executing program 2: 14:11:40 executing program 5: 14:11:40 executing program 0: 14:11:40 executing program 4: 14:11:40 executing program 1: 14:11:41 executing program 3: 14:11:41 executing program 2: 14:11:41 executing program 5: 14:11:41 executing program 0: 14:11:41 executing program 4: 14:11:41 executing program 1: 14:11:41 executing program 3: 14:11:41 executing program 2: 14:11:41 executing program 5: 14:11:41 executing program 0: 14:11:41 executing program 4: 14:11:42 executing program 2: 14:11:42 executing program 3: 14:11:42 executing program 1: 14:11:42 executing program 5: 14:11:42 executing program 4: 14:11:42 executing program 0: 14:11:42 executing program 2: 14:11:42 executing program 3: 14:11:42 executing program 1: 14:11:42 executing program 5: 14:11:42 executing program 4: 14:11:43 executing program 0: 14:11:43 executing program 2: 14:11:43 executing program 1: 14:11:43 executing program 3: 14:11:43 executing program 5: 14:11:43 executing program 4: 14:11:43 executing program 0: 14:11:43 executing program 2: 14:11:43 executing program 1: 14:11:43 executing program 5: 14:11:43 executing program 4: 14:11:44 executing program 3: 14:11:44 executing program 0: 14:11:44 executing program 2: 14:11:44 executing program 4: 14:11:44 executing program 1: 14:11:44 executing program 5: 14:11:44 executing program 3: 14:11:44 executing program 0: 14:11:44 executing program 2: 14:11:45 executing program 5: 14:11:45 executing program 4: 14:11:45 executing program 3: 14:11:45 executing program 0: 14:11:45 executing program 1: 14:11:45 executing program 2: 14:11:45 executing program 0: 14:11:46 executing program 4: 14:11:46 executing program 1: 14:11:46 executing program 5: 14:11:46 executing program 3: 14:11:46 executing program 4: 14:11:46 executing program 2: 14:11:46 executing program 0: 14:11:46 executing program 1: 14:11:46 executing program 5: 14:11:46 executing program 3: 14:11:47 executing program 4: 14:11:47 executing program 2: 14:11:47 executing program 0: 14:11:47 executing program 1: 14:11:47 executing program 5: 14:11:47 executing program 3: 14:11:47 executing program 2: 14:11:47 executing program 4: 14:11:47 executing program 0: 14:11:47 executing program 1: 14:11:48 executing program 5: 14:11:48 executing program 3: 14:11:48 executing program 2: 14:11:48 executing program 4: 14:11:48 executing program 0: 14:11:48 executing program 1: 14:11:48 executing program 3: 14:11:48 executing program 5: 14:11:48 executing program 2: 14:11:49 executing program 4: 14:11:49 executing program 0: 14:11:49 executing program 1: 14:11:49 executing program 3: 14:11:49 executing program 5: 14:11:49 executing program 2: 14:11:49 executing program 4: 14:11:49 executing program 0: 14:11:49 executing program 3: 14:11:49 executing program 1: 14:11:49 executing program 5: 14:11:49 executing program 2: 14:11:50 executing program 4: 14:11:50 executing program 0: 14:11:50 executing program 3: 14:11:50 executing program 5: 14:11:50 executing program 1: 14:11:50 executing program 2: 14:11:50 executing program 4: 14:11:50 executing program 0: 14:11:50 executing program 3: 14:11:50 executing program 5: 14:11:50 executing program 1: 14:11:51 executing program 2: 14:11:51 executing program 0: 14:11:51 executing program 4: 14:11:51 executing program 3: 14:11:51 executing program 2: 14:11:51 executing program 5: 14:11:51 executing program 1: 14:11:51 executing program 0: 14:11:51 executing program 4: 14:11:51 executing program 2: 14:11:51 executing program 3: 14:11:52 executing program 5: 14:11:52 executing program 1: 14:11:52 executing program 0: 14:11:52 executing program 4: 14:11:52 executing program 2: 14:11:52 executing program 3: 14:11:52 executing program 5: 14:11:52 executing program 1: 14:11:52 executing program 4: 14:11:52 executing program 2: 14:11:52 executing program 0: 14:11:53 executing program 3: 14:11:53 executing program 5: 14:11:53 executing program 1: 14:11:53 executing program 4: 14:11:53 executing program 2: 14:11:53 executing program 3: 14:11:53 executing program 0: 14:11:53 executing program 5: 14:11:53 executing program 1: 14:11:54 executing program 4: 14:11:54 executing program 2: 14:11:54 executing program 0: 14:11:54 executing program 3: 14:11:54 executing program 5: 14:11:54 executing program 1: 14:11:54 executing program 2: 14:11:54 executing program 0: 14:11:54 executing program 4: 14:11:54 executing program 3: 14:11:54 executing program 5: 14:11:54 executing program 1: 14:11:55 executing program 4: 14:11:55 executing program 0: 14:11:55 executing program 2: 14:11:55 executing program 5: 14:11:55 executing program 3: 14:11:55 executing program 1: 14:11:55 executing program 4: 14:11:55 executing program 2: 14:11:55 executing program 0: 14:11:55 executing program 5: 14:11:55 executing program 3: 14:11:56 executing program 1: 14:11:56 executing program 4: 14:11:56 executing program 2: 14:11:56 executing program 0: 14:11:56 executing program 3: 14:11:56 executing program 5: 14:11:56 executing program 1: 14:11:56 executing program 4: 14:11:56 executing program 2: 14:11:56 executing program 0: 14:11:56 executing program 3: 14:11:57 executing program 5: 14:11:57 executing program 2: 14:11:57 executing program 1: 14:11:57 executing program 4: 14:11:57 executing program 0: 14:11:57 executing program 5: 14:11:57 executing program 3: 14:11:57 executing program 2: 14:11:57 executing program 1: 14:11:57 executing program 0: 14:11:58 executing program 4: 14:11:58 executing program 5: 14:11:58 executing program 3: 14:11:58 executing program 2: 14:11:58 executing program 1: 14:11:58 executing program 0: 14:11:58 executing program 5: 14:11:58 executing program 4: 14:11:58 executing program 3: 14:11:58 executing program 2: 14:11:58 executing program 1: 14:11:59 executing program 0: 14:11:59 executing program 5: 14:11:59 executing program 4: 14:11:59 executing program 2: 14:11:59 executing program 3: 14:11:59 executing program 1: 14:11:59 executing program 0: 14:11:59 executing program 4: 14:11:59 executing program 5: 14:11:59 executing program 2: 14:12:00 executing program 3: 14:12:00 executing program 1: 14:12:00 executing program 0: 14:12:00 executing program 4: 14:12:00 executing program 5: 14:12:00 executing program 2: 14:12:00 executing program 3: 14:12:00 executing program 1: 14:12:00 executing program 0: 14:12:00 executing program 5: 14:12:00 executing program 4: 14:12:01 executing program 3: 14:12:01 executing program 2: 14:12:01 executing program 1: 14:12:01 executing program 0: 14:12:01 executing program 4: 14:12:01 executing program 5: 14:12:01 executing program 2: 14:12:01 executing program 3: 14:12:01 executing program 1: 14:12:01 executing program 0: 14:12:02 executing program 4: 14:12:02 executing program 5: 14:12:02 executing program 2: 14:12:02 executing program 3: 14:12:02 executing program 0: 14:12:02 executing program 1: 14:12:02 executing program 4: 14:12:02 executing program 5: 14:12:02 executing program 2: 14:12:02 executing program 3: 14:12:02 executing program 0: 14:12:02 executing program 1: 14:12:03 executing program 4: 14:12:03 executing program 5: 14:12:03 executing program 2: 14:12:03 executing program 1: 14:12:03 executing program 2: 14:12:04 executing program 4: 14:12:04 executing program 3: 14:12:04 executing program 0: 14:12:04 executing program 5: 14:12:04 executing program 1: 14:12:04 executing program 3: 14:12:04 executing program 4: 14:12:04 executing program 2: 14:12:04 executing program 0: 14:12:04 executing program 5: 14:12:04 executing program 1: 14:12:04 executing program 2: 14:12:04 executing program 3: 14:12:05 executing program 4: 14:12:05 executing program 0: 14:12:05 executing program 5: 14:12:05 executing program 1: 14:12:05 executing program 2: 14:12:05 executing program 3: 14:12:05 executing program 4: 14:12:05 executing program 0: 14:12:05 executing program 5: 14:12:05 executing program 2: 14:12:06 executing program 1: 14:12:06 executing program 3: 14:12:06 executing program 4: 14:12:06 executing program 0: 14:12:06 executing program 5: 14:12:06 executing program 2: 14:12:06 executing program 1: 14:12:06 executing program 3: 14:12:06 executing program 4: 14:12:06 executing program 0: 14:12:06 executing program 5: 14:12:07 executing program 2: 14:12:07 executing program 1: 14:12:07 executing program 4: 14:12:07 executing program 3: 14:12:07 executing program 0: 14:12:07 executing program 2: 14:12:07 executing program 5: 14:12:07 executing program 1: 14:12:07 executing program 4: 14:12:07 executing program 3: 14:12:07 executing program 0: 14:12:08 executing program 2: 14:12:08 executing program 5: 14:12:08 executing program 1: 14:12:08 executing program 3: 14:12:08 executing program 0: 14:12:08 executing program 4: 14:12:08 executing program 2: 14:12:08 executing program 5: 14:12:08 executing program 1: 14:12:08 executing program 3: 14:12:09 executing program 0: 14:12:09 executing program 2: 14:12:09 executing program 4: 14:12:09 executing program 5: 14:12:09 executing program 1: 14:12:09 executing program 3: 14:12:09 executing program 2: 14:12:09 executing program 0: 14:12:09 executing program 4: 14:12:09 executing program 5: 14:12:09 executing program 3: 14:12:09 executing program 1: 14:12:10 executing program 2: 14:12:10 executing program 0: 14:12:10 executing program 4: 14:12:10 executing program 5: 14:12:10 executing program 3: 14:12:10 executing program 1: 14:12:10 executing program 2: 14:12:10 executing program 0: 14:12:10 executing program 4: 14:12:10 executing program 3: 14:12:10 executing program 5: 14:12:10 executing program 1: 14:12:11 executing program 0: 14:12:11 executing program 2: 14:12:11 executing program 4: 14:12:11 executing program 3: 14:12:11 executing program 5: 14:12:11 executing program 0: 14:12:11 executing program 1: 14:12:11 executing program 4: 14:12:11 executing program 2: 14:12:11 executing program 3: 14:12:12 executing program 5: 14:12:12 executing program 2: 14:12:12 executing program 0: 14:12:12 executing program 1: 14:12:12 executing program 4: syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @empty}, "c32153baf42d1ca0"}}}}}, 0x0) 14:12:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 14:12:12 executing program 2: 14:12:12 executing program 5: 14:12:12 executing program 1: 14:12:12 executing program 0: 14:12:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) 14:12:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000140)={0x2, 0x5}) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x4001, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f00000001c0)={0x8, 'vxcan1\x00', {'ip6_vti0\x00'}, 0x8}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x1000, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 14:12:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 14:12:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) 14:12:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x44000600) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x40600) 14:12:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8001) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) 14:12:13 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000020c0)={0x1, 0x0}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x0, 0x0) read$char_raw(r2, &(0x7f0000006c00)={""/38509}, 0x5f44f8) [ 1686.266124][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1686.275281][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1686.316404][ T400] IPVS: ftp: loaded support on port[0] = 21 [ 1686.481074][ T399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1686.749750][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1686.777678][ T406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1687.033690][ T408] IPVS: ftp: loaded support on port[0] = 21 [ 1687.083594][T26153] tipc: TX() has been purged, node left! 14:12:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00 \x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf25180000000c00990009000000ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="0a000600aaaaaaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x20048844}, 0x4044895) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 14:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x26) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r3) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x19, &(0x7f0000002080), &(0x7f0000004100)=0x14) 14:12:14 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) io_submit(r0, 0x2, &(0x7f0000000640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="100000000500"/16, 0x10}]) 14:12:15 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 14:12:15 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @loopback, 0x4e21, 0x3, 'dh\x00', 0x0, 0x80000000}, 0x2c) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x0) 14:12:15 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="006c0091ff357148e88e63000000000045"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x33) 14:12:15 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x20, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000002c0)="17de6e86231a9d106499c84413c314654a80362eaa777b899bb41e68f329c88eeecec5a750674a55e851b2dc21b74a0fb1be2875d41c54da28f602c487e865e4f3ec5d71599e9e33a296088d6806b7d909a17ce3ad4be5574a09e3eff83a52dca337560e2fba3c7b295ce9b2d56605cea710c2a3f15d8a1274c44708b05ee0acc57aaf3caf92622dd8928c60c1f5c2db1af23c7a489fc719c63e5b5548bf8db19867d699883f0772680bc7ce70bc0673c99c", 0xb2}, {&(0x7f0000000400)="4c0a6161aa0f19579fabb1dc8e6e8c41a7859e389e2940891580f08e9ac7023fc6588a813f2feb6c267b1c055ace8deec341f9f7d267892108b9d7cde9eacb4c80e41766169e24fa3f214b0e131bcecdddc80daaa0e8445b52bdb81d7d2ff4ccb08efae608f11acc28d8", 0x6a}, {&(0x7f0000000500)}, {0x0}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x8004}, {&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000001880)="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", 0x1000}, {0x0}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xd8, 0x408d}, {&(0x7f0000000b00)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000cc0)=[{0x0}], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048040}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x68}, {&(0x7f0000002bc0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000002e00)="f6c1f68b8822ea07e9f83a6e8b84653408f1d12a340239ae3b3513039866b13a291618483755fed8401c17e419f79f92430dd8057d3869c2cfee0188d215a8e00ffb96", 0x43}, {&(0x7f0000002e80)}, {&(0x7f0000002fc0)}], 0x4}], 0x6, 0x240404c0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x68f58, 0x1000, 0x7, 0x4, 0xff, 0xb85}, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2e5b, 0xe7}, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xc2) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x18) sendfile(r3, r4, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x1c7) [ 1688.491984][ T477] ptrace attach of "/root/syz-executor.2"[476] was attempted by "/root/syz-executor.2"[477] 14:12:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x12, 0x0, &(0x7f0000000000)) [ 1688.968917][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1688.968976][ T28] audit: type=1800 audit(1599142336.401:112): pid=483 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16271 res=0 14:12:17 executing program 5: pipe2(&(0x7f00000001c0), 0x86000) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017001f7000ca98040000008004000000040010"], 0x18}}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32]) mkdir(&(0x7f0000000000)='./file0\x00', 0x86) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x100c10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x9, 0x0, 0x2, 0x4}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) close(r1) 14:12:17 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2000400) r2 = epoll_create1(0x0) socket$unix(0x1, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) 14:12:17 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x7, r1, 0x0, &(0x7f0000000100)={0x0}) 14:12:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) fchdir(r2) 14:12:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x20, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000002c0)="17de6e86231a9d106499c84413c314654a80362eaa777b899bb41e68f329c88eeecec5a750674a55e851b2dc21b74a0fb1be2875d41c54da28f602c487e865e4f3ec5d71599e9e33a296088d6806b7d909a17ce3ad4be5574a09e3eff83a52dca337560e2fba3c7b295ce9b2d56605cea710c2a3f15d8a1274c44708b05ee0acc57aaf3caf92622dd8928c60c1f5c2db1af23c7a489fc719c63e5b5548bf8db19867d699883f0772680bc7ce70bc0673c99c", 0xb2}, {&(0x7f0000000400)="4c0a6161aa0f19579fabb1dc8e6e8c41a7859e389e2940891580f08e9ac7023fc6588a813f2feb6c267b1c055ace8deec341f9f7d267892108b9d7cde9eacb4c80e41766169e24fa3f214b0e131bcecdddc80daaa0e8445b52bdb81d7d2ff4ccb08efae608f11acc28d8", 0x6a}, {&(0x7f0000000500)}, {0x0}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x8004}, {&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000001880)="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", 0x1000}, {0x0}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xd8, 0x408d}, {&(0x7f0000000b00)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000cc0)=[{0x0}], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048040}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x68}, {&(0x7f0000002bc0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000002e00)="f6c1f68b8822ea07e9f83a6e8b84653408f1d12a340239ae3b3513039866b13a291618483755fed8401c17e419f79f92430dd8057d3869c2cfee0188d215a8e00ffb96", 0x43}, {&(0x7f0000002e80)}, {&(0x7f0000002fc0)}], 0x4}], 0x6, 0x240404c0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x68f58, 0x1000, 0x7, 0x4, 0xff, 0xb85}, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2e5b, 0xe7}, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0xc2) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x18) sendfile(r3, r4, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x1c7) [ 1690.212640][ T500] ptrace attach of "/root/syz-executor.2"[9233] was attempted by "/root/syz-executor.2"[500] [ 1690.355503][ T28] audit: type=1800 audit(1599142337.783:113): pid=504 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16053 res=0 14:12:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000004c0)}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000002, 0x0, 0x0, 0xe7}, 0x0) ppoll(&(0x7f00000002c0)=[{}, {r2}, {r3, 0x1020}, {r1}, {}], 0x5, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) 14:12:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1171fe, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x1015) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000080)) 14:12:18 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="675faef16ff0a2c13707000005eb301420384897f1ac1dea61a7a765769c28409259007600000000800000000000", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 14:12:18 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x400141, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000001540)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x1ff, 0x100000000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) [ 1691.137531][ T522] ptrace attach of "/root/syz-executor.2"[520] was attempted by "/root/syz-executor.2"[522] 14:12:18 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="833695d1faff", @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @address_request={0x12}}}}}, 0x0) 14:12:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x2, 0x0, 0x7}]}}, &(0x7f0000000340)=""/132, 0x26, 0x84, 0x8}, 0x20) 14:12:18 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x5d, 0x7e, 0xdb, 0x20, 0x411, 0x4b, 0x1435, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x6}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="052f05e79a00f0"]}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgid(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x200041e0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000240)=0x3b5e) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0x0, 0x1f, 0x8, 0x3, 0x1, 0x2}) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x1000, 0x309942) r3 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)="2cd7cc297078bb1591a891aa874bdd7380b987692484e9c8c24821a805b1da6837d23f3f5bc0d4217d4279d699410905c00c885578560438a9581320d6082902ba385538163c0a65f6c93535c57b2b4d925fe8f9233da784cb35467c76743cef7e8ef439487220f0e48de92b713495dae2edbfe5831b58c640847f72a1f49f", 0x7f}, {&(0x7f0000000300)="ca611e48a029d1c88866d3ba1bd381e0b5b48cca9a79b7e8c57040d4d7d0a0ccb25880ed2b1b7f0b0d5cb37718b1a8971d98eb7552ee9e8a79340afe070d46b6bfe1ce4df16436511c160284f78ffb2896638b162ec2e098927c424e5fffb758f130e8118347c45bad75427089de09ca7910854b5e58a50583b518185f715ece72e68d79a998f64293b5079f8bc4b463330536077263340d2dac3bcb5480fdeaa18ff3b62a4967eb4872fbe9b3fbf1921c53f0877305cd12ab75a274cdae16", 0xbf}, {&(0x7f00000003c0)="1f146bbcda637724b9aea47bca5fbd41c0550adf784a7c72649c7164c7b9f6d243a1e69c8722", 0x26}, {&(0x7f0000000400)="1de10fec5f3e6e58ad505ad822876e93b54b7de68a96d514a3b043874d50fd0f3c2519df21f4d566849d6fe845b5c8d9ea9eeb106857506f93582a081f8d1727b000ab436ddd151f88e8aa0213ceb2df244a32b46ecbee2b590049a40bcd933d49c03b18e2", 0x65}], 0x4, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @jmp={0x5, 0x1, 0x8, 0x5, 0x1, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x200102, 0x4) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:12:18 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:19 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x1, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) memfd_create(0x0, 0x0) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000100)="92801cda929bb0640fe3d205d1a6c015b06e1db2b6606046", 0x18}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)}], 0x6, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffff000b) [ 1691.699595][ T534] BPF:[1] FWD (anon) [ 1691.703829][ T534] BPF:struct [ 1691.707355][ T534] BPF: [ 1691.710172][ T534] BPF:vlen != 0 [ 1691.713675][ T534] BPF: [ 1691.713675][ T534] 14:12:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) [ 1691.813939][ T534] BPF:[1] FWD (anon) [ 1691.818263][ T534] BPF:struct [ 1691.821513][ T534] BPF: [ 1691.824323][ T534] BPF:vlen != 0 [ 1691.828076][ T534] BPF: [ 1691.828076][ T534] [ 1691.964643][ T28] audit: type=1804 audit(1599142339.384:114): pid=541 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir059204783/syzkaller.BI6MZQ/1592/file1/bus" dev="loop2" ino=9 res=1 [ 1691.997893][ T9101] usb 1-1: new high-speed USB device number 23 using dummy_hcd 14:12:19 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000005a0001000000000000000000000000000c"], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1692.157302][ T28] audit: type=1804 audit(1599142339.434:115): pid=541 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir059204783/syzkaller.BI6MZQ/1592/file1/bus" dev="loop2" ino=9 res=1 [ 1692.182231][ T28] audit: type=1804 audit(1599142339.444:116): pid=541 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir059204783/syzkaller.BI6MZQ/1592/file1/bus" dev="loop2" ino=9 res=1 [ 1692.270434][ T9101] usb 1-1: Using ep0 maxpacket: 32 14:12:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat6\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/74, 0x2000008a}], 0x1, 0x0, 0x0) [ 1692.453462][ T9101] usb 1-1: unable to get BOS descriptor or descriptor too short 14:12:20 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) getsockname$packet(r0, 0x0, &(0x7f0000000380)) [ 1692.696823][ T28] audit: type=1804 audit(1599142340.110:117): pid=546 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir059204783/syzkaller.BI6MZQ/1592/file1/bus" dev="loop2" ino=9 res=1 [ 1692.724880][ T9101] usb 1-1: New USB device found, idVendor=0411, idProduct=004b, bcdDevice=14.35 [ 1692.734376][ T9101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.742641][ T9101] usb 1-1: Product: syz 14:12:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) [ 1692.746905][ T9101] usb 1-1: Manufacturer: syz [ 1692.751630][ T9101] usb 1-1: SerialNumber: syz [ 1692.878643][ T28] audit: type=1804 audit(1599142340.160:118): pid=546 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir059204783/syzkaller.BI6MZQ/1592/file1/bus" dev="loop2" ino=9 res=1 [ 1692.904089][ T28] audit: type=1804 audit(1599142340.160:119): pid=541 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir059204783/syzkaller.BI6MZQ/1592/file1/bus" dev="loop2" ino=9 res=1 14:12:20 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x1, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) memfd_create(0x0, 0x0) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000100)="92801cda929bb0640fe3d205d1a6c015b06e1db2b6606046", 0x18}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)}], 0x6, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffff000b) [ 1692.921630][ T9101] usb 1-1: config 0 descriptor?? [ 1692.928792][ T28] audit: type=1804 audit(1599142340.170:120): pid=546 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir059204783/syzkaller.BI6MZQ/1592/file1/bus" dev="loop2" ino=9 res=1 14:12:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x21, 0x74}, [@call={0x35}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc6, &(0x7f00000002c0)=""/166, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 1693.240442][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1693.259992][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1693.269720][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:12:20 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) getsockname$packet(r0, 0x0, &(0x7f0000000380)) [ 1693.379268][ T28] audit: type=1800 audit(1599142340.617:121): pid=535 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16285 res=0 [ 1694.068866][ T9101] usb 1-1: bad CDC descriptors [ 1694.075445][ T9101] usb 1-1: bad CDC descriptors [ 1694.145818][ T9101] usb 1-1: USB disconnect, device number 23 [ 1694.795139][T10571] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1695.036375][T10571] usb 1-1: Using ep0 maxpacket: 32 [ 1695.198331][T10571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1695.458966][T10571] usb 1-1: New USB device found, idVendor=0411, idProduct=004b, bcdDevice=14.35 [ 1695.468152][T10571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.477012][T10571] usb 1-1: Product: syz [ 1695.481436][T10571] usb 1-1: Manufacturer: syz [ 1695.486227][T10571] usb 1-1: SerialNumber: syz 14:12:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) [ 1695.554448][T10571] usb 1-1: config 0 descriptor?? 14:12:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) splice(r1, 0x0, r3, 0x0, 0x8900000, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg(r5, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a05b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000100)={0x0, 0x100}, 0xc) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) gettid() 14:12:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000000400)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f00000003c0)=""/17, 0x11}, 0x8}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000700)=""/124, 0x7c}, {&(0x7f0000000780)=""/176, 0xb0}, {0x0}], 0x3}, 0x6}, {{&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, 0x0}, 0xfffffffc}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x1, 0x0) sendmsg(r4, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r5, 0x2008002) sendfile(r3, r5, 0x0, 0x200fff) 14:12:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 14:12:22 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:22 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r0, 0x4b7a00000008, 0x2) [ 1695.584260][T10571] usb 1-1: can't set config #0, error -71 [ 1695.647229][T10571] usb 1-1: USB disconnect, device number 24 [ 1695.904859][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1695.904917][ T28] audit: type=1800 audit(1599142343.300:125): pid=616 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16315 res=0 14:12:23 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@enum, @array, @const, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x80}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:23 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) [ 1696.641643][ T626] ptrace attach of "/root/syz-executor.2"[625] was attempted by "/root/syz-executor.2"[626] 14:12:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000119050004000000000000000000003c0001802c0001001400030016f8bcd383ad9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe8800000000000000000000000000ff14000400ff00000c000000800000000000000001080007000000000024000f"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x94) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4003) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x0) 14:12:24 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) 14:12:24 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) [ 1697.353093][ T639] overlayfs: overlapping lowerdir path 14:12:24 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000b00)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0xbe, 0x0) 14:12:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 14:12:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x40084503, 0x0) 14:12:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x6a0}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x7, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 1697.429738][ T643] overlayfs: overlapping lowerdir path 14:12:25 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='system.posix_acl_access\x00', &(0x7f0000001700)={{}, {}, [{}]}, 0x2000172c, 0x0) 14:12:25 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 14:12:25 executing program 5: truncate(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x5, [@enum={0x0, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x8}, {0x8, 0x1}, {0x6, 0x8}, {}, {0x0, 0x1}, {0xb, 0x5}, {0x0, 0xc98}]}, @struct={0xb, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {0x0, 0x3, 0x806825c3}, {0x0, 0x0, 0x80000000}]}, @fwd={0x7}, @restrict, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5}, {0x10, 0x3}, {0x3}, {0x8, 0x1}, {}]}, @const]}, {0x0, [0x61, 0x0, 0x0]}}, 0x0, 0xe9}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x80084503, 0x0) 14:12:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x87}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 14:12:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000ac0)) 14:12:25 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) [ 1698.435891][ T668] ptrace attach of "/root/syz-executor.5"[666] was attempted by "/root/syz-executor.5"[668] 14:12:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0x400c4808, 0x0) 14:12:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 14:12:26 executing program 0: unshare(0x44000600) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) fgetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) [ 1698.804501][ T673] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 14:12:26 executing program 1: unshare(0x600) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) flock(r0, 0x0) 14:12:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) [ 1699.187549][ T683] IPVS: ftp: loaded support on port[0] = 21 [ 1699.264701][ T8724] usb 6-1: new high-speed USB device number 2 using dummy_hcd 14:12:26 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) [ 1699.526252][ T8724] usb 6-1: Using ep0 maxpacket: 16 [ 1699.530693][ T683] IPVS: ftp: loaded support on port[0] = 21 [ 1699.669432][ T8724] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1699.681092][ T8724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.692678][ T8724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.702685][ T8724] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1699.717810][ T8724] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1699.727018][ T8724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:12:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r6}}}], 0x28}, 0xa00) 14:12:27 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) [ 1700.095796][T26158] tipc: TX() has been purged, node left! [ 1700.133018][ T8724] usb 6-1: config 0 descriptor?? [ 1700.716791][ T8724] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0009/input/input23 [ 1700.756078][ T8724] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0009/input/input24 [ 1700.852222][ T8724] kye 0003:0458:5013.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 1700.894225][ T8724] usb 6-1: USB disconnect, device number 2 [ 1701.620705][ T9101] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1701.757300][T26158] tipc: TX() has been purged, node left! [ 1701.895064][ T9101] usb 6-1: Using ep0 maxpacket: 16 [ 1702.027939][ T9101] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1702.039258][ T9101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.050561][ T9101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.061034][ T9101] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1702.074448][ T9101] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1702.084873][ T9101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.126724][ T9101] usb 6-1: config 0 descriptor?? [ 1702.570792][ T9101] usbhid 6-1:0.0: can't add hid device: -71 [ 1702.577331][ T9101] usbhid: probe of 6-1:0.0 failed with error -71 [ 1702.621425][ T9101] usb 6-1: USB disconnect, device number 3 14:12:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0xc573de0d27bdf67d, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @private}}, {0x14, 0x2, @in={0x2, 0x0, @private}}}}]}]}, 0x54}}, 0x0) 14:12:33 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x3c, 0x0, 0x0) 14:12:33 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) 14:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019300)={0x48, r1, 0xb03, 0x0, 0x0, {0x13, 0x0, 0x7}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2}]}]}, 0x48}}, 0x0) 14:12:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000100005070000000000000000f0ff0000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1706.006029][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1706.101548][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:12:33 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:33 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) 14:12:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r2) io_setup(0x6, &(0x7f0000000140)=0x0) socket$tipc(0x1e, 0x5, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x9}]) 14:12:33 executing program 5: mlockall(0x1) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xca200) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 1706.237488][ T807] tipc: Enabling of bearer rejected, failed to enable media [ 1706.305209][ T808] tipc: Enabling of bearer rejected, failed to enable media 14:12:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffd}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 14:12:34 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) 14:12:34 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 14:12:34 executing program 3: r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:34 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) 14:12:34 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99421f46b0e4ca0000000000001f8b25bee7df03b08db40ba73ac381dd4dea5dacb2742934b0a4f96bce7272315219e1e9ddc40c9acf64dbf2f47b", 0xaf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 14:12:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ee0eec40b8071a403d3d31d04e110902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x1, 'b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:12:34 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 14:12:34 executing program 3: r0 = socket(0x1, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) [ 1707.532814][ T838] ptrace attach of "/root/syz-executor.2"[837] was attempted by "/root/syz-executor.2"[838] 14:12:35 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb", 0x51}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 14:12:35 executing program 0: unshare(0x44000600) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x343102, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 1707.921186][ T849] ptrace attach of "/root/syz-executor.2"[846] was attempted by "/root/syz-executor.2"[849] [ 1708.005297][T28107] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1708.116649][ T853] IPVS: ftp: loaded support on port[0] = 21 [ 1708.309086][T28107] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1708.513551][ T853] IPVS: ftp: loaded support on port[0] = 21 [ 1708.670623][T26140] tipc: TX() has been purged, node left! [ 1709.183567][T28107] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=3d.3d [ 1709.193162][T28107] usb 2-1: New USB device strings: Mfr=49, Product=208, SerialNumber=78 [ 1709.201652][T28107] usb 2-1: Product: syz [ 1709.207626][T28107] usb 2-1: Manufacturer: syz [ 1709.212537][T28107] usb 2-1: SerialNumber: syz [ 1709.226639][T28107] usb 2-1: config 0 descriptor?? 14:12:37 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0xff600000, 0x0, 0x0, 0x0) 14:12:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) timer_create(0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='cgroup\x00', 0x0, &(0x7f0000000240)='no,e\x00') 14:12:37 executing program 3: r0 = socket(0x1, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 14:12:37 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 14:12:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="230228efb4a24fe84689000080cb000000005d6fe0eb92552fba4784466ebedbcc3e06000000000000006c0e09d1ede6c1f37b9c352ef85a00004380a8cf359a30a74dc68c37cfbe8808000000000000997208002a74e3e6236e1882c601f2b49e32098f6919c7234cebfe065d74f205005de2be4e7b3881c92986a5aba82763b2d64194569196560b10d425ddd904000000000000004b03ba4b656f9029509bed808f4aa86c8dc50de43149543b9124af5e9ccd3c36c416e6ba34d30721fec6933bef175b6dcfcb5c2c428f750e12bf08cf6a46df9b9e5b00c8de1d6687f10b410b852cc7c6dba25ce854d650dc3a13984b627b85d0809e6a420000a9027b413acacb65253484b86864a9a334b01bee1f2d34137b74920371226fd9e796f5586d354ba2edab762282359053a77689cb44982409000000f10fba67eb000dbbd15658dca7369052f97b8caebd4786bce825d47510a349a27b00000000000000000000000000003ae9aaacb2c6eb2ecd04979b7869f8a7cdf5f079861a964036381305ff8a9f4e7e645ac443ce61c54b95fd12d059fa37e1c4770b39ac61c3ea62c09838969753e7e15fcc1d6c1a40781864d1d90000000000c15aea9f836279c9c14009168d44292afe9e17259488c3da689c013a00a59990354ff96b99814834ed6ec4bdd0b0d7a88240841505ec2788805d0cf5aa421e23ff0579d1d25fa785cd120bc07457455a0a996cbed1d1c5bc13d3fe9824f7fc7d825b9b0b3c45d4d6217371753284a22c97e27a85956153cde4bddece070a49e8802d26fe68417bfb198507103762aa640317c9ddcd51158152010ac6c05fa138f5c30edae7fb23c3760e2b637b6fdb32c2ee5aac3ff445143b1bff2c7627e6231ec99fe89e1c36e001e2f4947390173cd63e1206ff18b12d7d7422a13c0e23fa70811cf246b231fd0254cf"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 1709.781386][ T914] cgroup: Unknown subsys name 'no' 14:12:37 executing program 2: socket$inet6(0xa, 0x80003, 0x67) r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002280), 0x853) r2 = open(&(0x7f0000000040)='./file0\x00', 0xc2242, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x2008000fffffffe) lseek(0xffffffffffffffff, 0x0, 0x0) [ 1709.846511][ T914] cgroup: Unknown subsys name 'no' [ 1709.926555][T28107] ===================================================== [ 1709.933746][T28107] BUG: KMSAN: uninit-value in batadv_hard_if_event+0x28d7/0x3bd0 [ 1709.941482][T28107] CPU: 1 PID: 28107 Comm: kworker/1:6 Not tainted 5.8.0-rc5-syzkaller #0 [ 1709.949897][T28107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.959988][T28107] Workqueue: usb_hub_wq hub_event [ 1709.965097][T28107] Call Trace: [ 1709.968384][T28107] dump_stack+0x21c/0x280 [ 1709.972721][T28107] kmsan_report+0xf7/0x1e0 [ 1709.977134][T28107] __msan_warning+0x58/0xa0 [ 1709.981658][T28107] batadv_hard_if_event+0x28d7/0x3bd0 [ 1709.987059][T28107] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 1709.993304][T28107] raw_notifier_call_chain+0x123/0x290 [ 1709.998780][T28107] register_netdevice+0x3120/0x37d0 [ 1710.003987][T28107] register_netdev+0xbe/0x100 [ 1710.008675][T28107] rtl8150_probe+0x12d9/0x15b0 [ 1710.013618][T28107] ? read_eprom_word+0xe80/0xe80 [ 1710.018551][T28107] usb_probe_interface+0xece/0x1550 [ 1710.023749][T28107] ? usb_register_driver+0x900/0x900 [ 1710.029048][T28107] really_probe+0xf20/0x20b0 [ 1710.033649][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.038868][T28107] driver_probe_device+0x293/0x390 [ 1710.043982][T28107] __device_attach_driver+0x63f/0x830 [ 1710.049449][T28107] bus_for_each_drv+0x2ca/0x3f0 [ 1710.054312][T28107] ? coredump_store+0xf0/0xf0 [ 1710.058989][T28107] __device_attach+0x4e2/0x7f0 [ 1710.063756][T28107] device_initial_probe+0x4a/0x60 [ 1710.068777][T28107] bus_probe_device+0x177/0x3d0 [ 1710.073645][T28107] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1710.079548][T28107] device_add+0x3b0e/0x40d0 [ 1710.084104][T28107] usb_set_configuration+0x380f/0x3f10 [ 1710.089567][T28107] ? usb_set_configuration+0xb41/0x3f10 [ 1710.095130][T28107] usb_generic_driver_probe+0x138/0x300 [ 1710.100672][T28107] ? usb_choose_configuration+0xe70/0xe70 [ 1710.106382][T28107] usb_probe_device+0x311/0x490 [ 1710.111231][T28107] ? usb_register_device_driver+0x540/0x540 [ 1710.117119][T28107] really_probe+0xf20/0x20b0 [ 1710.121712][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.127010][T28107] driver_probe_device+0x293/0x390 [ 1710.132147][T28107] __device_attach_driver+0x63f/0x830 [ 1710.137521][T28107] bus_for_each_drv+0x2ca/0x3f0 [ 1710.142382][T28107] ? coredump_store+0xf0/0xf0 [ 1710.147061][T28107] __device_attach+0x4e2/0x7f0 [ 1710.151827][T28107] device_initial_probe+0x4a/0x60 [ 1710.156845][T28107] bus_probe_device+0x177/0x3d0 [ 1710.161691][T28107] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1710.167488][T28107] device_add+0x3b0e/0x40d0 [ 1710.172024][T28107] usb_new_device+0x1bd4/0x2a30 [ 1710.176882][T28107] hub_event+0x5e7b/0x8a70 [ 1710.181338][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.186547][T28107] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1710.192348][T28107] ? led_work+0x7c0/0x7c0 [ 1710.196673][T28107] process_one_work+0x1688/0x2140 [ 1710.201709][T28107] worker_thread+0x10bc/0x2730 [ 1710.206465][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.211658][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.216859][T28107] kthread+0x551/0x590 [ 1710.220923][T28107] ? process_one_work+0x2140/0x2140 [ 1710.226131][T28107] ? kthread_blkcg+0x110/0x110 [ 1710.230913][T28107] ret_from_fork+0x1f/0x30 [ 1710.235322][T28107] [ 1710.237640][T28107] Uninit was stored to memory at: [ 1710.243440][T28107] kmsan_internal_chain_origin+0xad/0x130 [ 1710.249150][T28107] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 1710.255120][T28107] kmsan_memcpy_metadata+0xb/0x10 [ 1710.260134][T28107] __msan_memcpy+0x43/0x50 [ 1710.264541][T28107] rtl8150_probe+0x1236/0x15b0 [ 1710.269415][T28107] usb_probe_interface+0xece/0x1550 [ 1710.274604][T28107] really_probe+0xf20/0x20b0 [ 1710.279191][T28107] driver_probe_device+0x293/0x390 [ 1710.284310][T28107] __device_attach_driver+0x63f/0x830 [ 1710.289691][T28107] bus_for_each_drv+0x2ca/0x3f0 [ 1710.294532][T28107] __device_attach+0x4e2/0x7f0 [ 1710.299285][T28107] device_initial_probe+0x4a/0x60 [ 1710.304325][T28107] bus_probe_device+0x177/0x3d0 [ 1710.309177][T28107] device_add+0x3b0e/0x40d0 [ 1710.313679][T28107] usb_set_configuration+0x380f/0x3f10 [ 1710.319150][T28107] usb_generic_driver_probe+0x138/0x300 [ 1710.324694][T28107] usb_probe_device+0x311/0x490 [ 1710.329629][T28107] really_probe+0xf20/0x20b0 [ 1710.334215][T28107] driver_probe_device+0x293/0x390 [ 1710.339317][T28107] __device_attach_driver+0x63f/0x830 [ 1710.344680][T28107] bus_for_each_drv+0x2ca/0x3f0 [ 1710.349524][T28107] __device_attach+0x4e2/0x7f0 [ 1710.354278][T28107] device_initial_probe+0x4a/0x60 [ 1710.359290][T28107] bus_probe_device+0x177/0x3d0 [ 1710.364131][T28107] device_add+0x3b0e/0x40d0 [ 1710.368626][T28107] usb_new_device+0x1bd4/0x2a30 [ 1710.373468][T28107] hub_event+0x5e7b/0x8a70 [ 1710.377878][T28107] process_one_work+0x1688/0x2140 [ 1710.382893][T28107] worker_thread+0x10bc/0x2730 [ 1710.387646][T28107] kthread+0x551/0x590 [ 1710.391706][T28107] ret_from_fork+0x1f/0x30 [ 1710.396103][T28107] [ 1710.398417][T28107] Local variable ----node_id.i@rtl8150_probe created at: [ 1710.405428][T28107] rtl8150_probe+0xea7/0x15b0 [ 1710.410094][T28107] rtl8150_probe+0xea7/0x15b0 [ 1710.414753][T28107] ===================================================== [ 1710.421665][T28107] Disabling lock debugging due to kernel taint [ 1710.427801][T28107] Kernel panic - not syncing: panic_on_warn set ... [ 1710.434383][T28107] CPU: 1 PID: 28107 Comm: kworker/1:6 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1710.444168][T28107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.454219][T28107] Workqueue: usb_hub_wq hub_event [ 1710.459229][T28107] Call Trace: [ 1710.462943][T28107] dump_stack+0x21c/0x280 [ 1710.467371][T28107] panic+0x4d7/0xef7 [ 1710.474260][T28107] ? add_taint+0x17c/0x210 [ 1710.478867][T28107] kmsan_report+0x1df/0x1e0 [ 1710.483373][T28107] __msan_warning+0x58/0xa0 [ 1710.487917][T28107] batadv_hard_if_event+0x28d7/0x3bd0 [ 1710.493298][T28107] ? batadv_hardif_remove_interface+0x4c0/0x4c0 [ 1710.499531][T28107] raw_notifier_call_chain+0x123/0x290 [ 1710.505684][T28107] register_netdevice+0x3120/0x37d0 [ 1710.510895][T28107] register_netdev+0xbe/0x100 [ 1710.515570][T28107] rtl8150_probe+0x12d9/0x15b0 [ 1710.520354][T28107] ? read_eprom_word+0xe80/0xe80 [ 1710.525294][T28107] usb_probe_interface+0xece/0x1550 [ 1710.530495][T28107] ? usb_register_driver+0x900/0x900 [ 1710.535796][T28107] really_probe+0xf20/0x20b0 [ 1710.540818][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.546014][T28107] driver_probe_device+0x293/0x390 [ 1710.551125][T28107] __device_attach_driver+0x63f/0x830 [ 1710.556498][T28107] bus_for_each_drv+0x2ca/0x3f0 [ 1710.561343][T28107] ? coredump_store+0xf0/0xf0 [ 1710.566024][T28107] __device_attach+0x4e2/0x7f0 [ 1710.570802][T28107] device_initial_probe+0x4a/0x60 [ 1710.575818][T28107] bus_probe_device+0x177/0x3d0 [ 1710.580665][T28107] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1710.586465][T28107] device_add+0x3b0e/0x40d0 [ 1710.590978][T28107] usb_set_configuration+0x380f/0x3f10 [ 1710.596436][T28107] ? usb_set_configuration+0xb41/0x3f10 [ 1710.601994][T28107] usb_generic_driver_probe+0x138/0x300 [ 1710.607551][T28107] ? usb_choose_configuration+0xe70/0xe70 [ 1710.613265][T28107] usb_probe_device+0x311/0x490 [ 1710.618133][T28107] ? usb_register_device_driver+0x540/0x540 [ 1710.624020][T28107] really_probe+0xf20/0x20b0 [ 1710.628610][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.633834][T28107] driver_probe_device+0x293/0x390 [ 1710.638944][T28107] __device_attach_driver+0x63f/0x830 [ 1710.644317][T28107] bus_for_each_drv+0x2ca/0x3f0 [ 1710.649159][T28107] ? coredump_store+0xf0/0xf0 [ 1710.653838][T28107] __device_attach+0x4e2/0x7f0 [ 1710.658609][T28107] device_initial_probe+0x4a/0x60 [ 1710.663652][T28107] bus_probe_device+0x177/0x3d0 [ 1710.668698][T28107] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1710.674505][T28107] device_add+0x3b0e/0x40d0 [ 1710.679025][T28107] usb_new_device+0x1bd4/0x2a30 [ 1710.683908][T28107] hub_event+0x5e7b/0x8a70 [ 1710.688362][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.693558][T28107] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1710.699359][T28107] ? led_work+0x7c0/0x7c0 [ 1710.703686][T28107] process_one_work+0x1688/0x2140 [ 1710.708719][T28107] worker_thread+0x10bc/0x2730 [ 1710.713474][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.718670][T28107] ? kmsan_get_metadata+0x116/0x180 [ 1710.723875][T28107] kthread+0x551/0x590 [ 1710.727943][T28107] ? process_one_work+0x2140/0x2140 [ 1710.733139][T28107] ? kthread_blkcg+0x110/0x110 [ 1710.737926][T28107] ret_from_fork+0x1f/0x30 [ 1710.743984][T28107] Kernel Offset: disabled [ 1710.748377][T28107] Rebooting in 86400 seconds..