0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r1, 0xa, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x2) dup(0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x220407b5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0x280076ed, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a40c1, 0x103}}], 0x10002, 0x0, 0x0) sendto$inet(r3, &(0x7f00000012c0)='\f&', 0x2, 0x801, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) 13:57:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0xfffffffffffffffd}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x0, 0x2000000ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/47}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x7fffff, 0x10010, 0xffffffffffffffff, 0x799b8000) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="fa367c4ea7359f2276a729f001ea8ddb99d0fcd359911722e895c258340a03b27ed86c75ae8d7100f2e4c635d468c90bb8ae3d46b991ff3e9c99c650e108ac08dc6b0675221d61706d0f812b38f699e98bdef343ba4fd0ba7e6f654220e9b45ed34620c78f497fc12fbc132665b98291f9b0cc3fc33000000000000061737e438ee9f14ac7615b7ea32044957fa059a53d900d25e3ac6012f92a21df510a624d1974f0dcaf29cb50c4ec05b49856527ac0e526077ebfeed6736f36da3d47511028e180519cc0dff54230b4b864b95f87cb27194d1617357e000000000000", @ANYRESHEX, @ANYRESDEC=r4, @ANYRESOCT], 0x7, 0x1) clone(0x49221503, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="ba2c0c8bae5d5ede94f15bcc2f25fa032a120de584f18c57740ad2c3904c49b7b6ced926652c7e0bb0548fae51442762e7974a342043b8b8823710dedeb3dc68b9a81533fbe4cdf57809d5aa6d3f746b79b3ce12c798f0165921b34e236e4a1da5c48e13f0518be5e5bc54d019e9dfceecbb13e0c6765bd471d55fa47bfe786383832b5be8b5239868d292d69b8455f80ae64b40"], 0x38) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 13:57:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000, 0x7}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) socket(0x1, 0x800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) setregid(0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x40000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6=@private2}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast1}}, 0x0) socket(0x0, 0x803, 0x0) setregid(0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000140)="73844ae89d", 0x5}]) 13:57:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) socketpair(0x0, 0x0, 0x0, 0x0) [ 495.468218][T12923] IPVS: ftp: loaded support on port[0] = 21 [ 495.606923][ T32] audit: type=1804 audit(1595167024.786:29): pid=12927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir826559012/syzkaller.IdGcod/120/bus" dev="sda1" ino=16187 res=1 13:57:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:05 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff6f, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) pipe(&(0x7f00000005c0)) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x40800, 0x0) accept4$packet(r1, 0x0, &(0x7f00000001c0), 0x80000) open(0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/234, 0xea}], 0x3, &(0x7f0000000140)=""/8, 0x8}, 0x8}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000016c0)=""/236, 0xec}, {&(0x7f00000017c0)=""/132, 0x84}, {&(0x7f0000001880)=""/213, 0xd5}], 0x5}, 0x4}, {{&(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000001a00)=""/150, 0x96}, {0x0}], 0x2}}, {{&(0x7f0000001d80)=@in6, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e00)=""/169, 0xa9}, {&(0x7f0000001ec0)=""/125, 0x7d}, {0x0}], 0x3}, 0x80000000}, {{&(0x7f0000002140)=@alg, 0x80, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/239, 0xef}, {&(0x7f00000022c0)=""/114, 0x72}, {&(0x7f0000002340)=""/159, 0x9f}], 0x3, &(0x7f0000002440)=""/11, 0xb}, 0x80000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0)=""/93, 0x5d}, 0x9}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) 13:57:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000018c0)={0x6, 0x13d, 0xb4a6}) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="fbc891ba9eca903ea056a87bdb924079a53cc5329675848b0faad9affcfc9ffe53c9a5004f4ea317c3f174dc28542fd8b1305d50935864364473af", 0x3b}, {&(0x7f00000000c0)="ab5ec033473a75a5ba99452b952d221d5676b9ef4ab84adcbac894038d476943511a49cba10315e0eb451fe0", 0x2c}, {&(0x7f00000001c0)="c7eea061582fb2de3b73f270fd817c16c43c3dec3a2ceb5ddb9496aeb54224a33ba1477e8f4e94b81ca63fee9eebeda88982f3", 0x33}, {&(0x7f0000000200)="a1e2170febee811643ca4cc657956fe3d552852be19d457f12390f3578a6410cdf3b5d4020d6bc", 0x27}], 0x4, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001680)={r3, 0xe1, "2d6c5ac695cb8d1884af9f4e64ba489d190c5928ed70f0c87f28948ae3683a308535329b3762a60cea0c5a3b6100a63d53c5f9cd716ee42d87d01d7953642be35307a2ac091623a688e582da5cf1d951eca7463671c3b9763e8c1ddc74faf03a10d95393433383ab2e1f9427560848a12040c08a6a490593c89eca338220b41b5ea2da58fcb29bb2dbef5a641a399e1aa8cdba8731a46945c06b67fc2e79a66e67a8c773dfe325504edce7738c6068d53fb6f1610599ddd2b070f920eeffcacdcc2400297e8008b82fceac90f7f673985c3120bbab1da479dc55d4aa7615da2641"}, &(0x7f0000001780)=0xe9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r4, 0x0) pipe(&(0x7f0000001540)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000001600)={0x10, 0x30, 0xfa00, {&(0x7f00000015c0)={0xffffffffffffffff}, 0x4, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x30}, 0x7fffffff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000001640)={0x11, 0x10, 0xfa00, {&(0x7f0000001580), r7}}, 0x18) ioctl$VIDIOC_G_FBUF(r5, 0x802c560a, &(0x7f0000001880)={0x62, 0xf, &(0x7f00000017c0)="58509af3b52070a027df5439fbc66223be7c7453df51acd99c6004d43d01de247ce7941686a385d02bacaf63493e4485929d2298e4558350d9f3136528d6076d17a8b7c3cc0648337a5fd33e0f3c296e679ac5191ab4e92f15024b9c049ec9aa59149c65ebbbbe3c26015e40739e08af46dfad12d56df199a6a9c040971430c0cb97994a842abd122f0b20a4668eb87e9ce7cb8c973efa8eac7c051094660cb15b7afe85792dc36eac55b6dd10202854caf32b2125d1ff9336a10a", {0x9, 0xfffffff8, 0x51563945, 0x1, 0x7, 0xa503, 0xc, 0x43d9}}) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) 13:57:05 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/44, 0x2c}, {0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000340)=""/111, 0x6f}], 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) [ 496.442687][T12963] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 496.461637][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.992821][T12963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 497.229007][T12975] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 497.237435][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 497.264545][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:57:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:06 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005402}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 13:57:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setresuid(r3, r5, r1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setresuid(r3, r1, r7) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) getsockopt$inet_dccp_buf(r8, 0x21, 0xdc87d1d8bdaf49b4, &(0x7f00000001c0)=""/200, &(0x7f0000000100)=0xc8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) 13:57:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000240)={0x0, "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"}) [ 497.708200][T12243] tipc: TX() has been purged, node left! 13:57:07 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) 13:57:07 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xa115) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff6f, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) pipe(&(0x7f00000005c0)) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x40800, 0x0) accept4$packet(r1, 0x0, &(0x7f00000001c0), 0x80000) open(0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/234, 0xea}], 0x3, &(0x7f0000000140)=""/8, 0x8}, 0x8}, {{&(0x7f00000003c0)=@nl, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000016c0)=""/236, 0xec}, {&(0x7f00000017c0)=""/132, 0x84}, {&(0x7f0000001880)=""/213, 0xd5}], 0x5}, 0x4}, {{&(0x7f0000001980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000001a00)=""/150, 0x96}, {&(0x7f0000001ac0)=""/209, 0xd1}, {&(0x7f0000001bc0)=""/217, 0xd9}], 0x3}}, {{&(0x7f0000001d80)=@in6, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e00)=""/169, 0xa9}, {&(0x7f0000001ec0)=""/125, 0x7d}, {&(0x7f0000001f40)=""/68, 0x44}, {&(0x7f0000001fc0)}], 0x4}, 0x80000000}, {{&(0x7f0000002140)=@alg, 0x80, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/239, 0xef}, {&(0x7f00000022c0)=""/114, 0x72}, {&(0x7f0000002340)=""/159, 0x9f}], 0x3, &(0x7f0000002440)=""/11, 0xb}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003480)=""/222, 0xde}, {&(0x7f0000003580)=""/211, 0xd3}], 0x2, &(0x7f00000037c0)=""/93, 0x5d}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x6, 'veth0_to_bridge\x00', {0x3}, 0x3f}) 13:57:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0x80000001, 0x3, 0x6, {0x7, 0xfffffff7}, 0x5, 0x4000}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@none, 0x6b}) setresuid(0xffffffffffffffff, r1, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) [ 498.317906][T12994] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 498.338706][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:57:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1) [ 498.909204][T12994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:57:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) [ 499.171202][T12994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.192202][T12994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:57:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 13:57:09 executing program 0: modify_ldt$read(0x0, &(0x7f0000000000)=""/246, 0xf6) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) [ 501.101340][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 501.113519][ C1] clocksource: 'acpi_pm' wd_now: b7c6a1 wd_last: 230832 mask: ffffff [ 501.123762][ C1] clocksource: 'tsc' cs_now: 1102bed2f95 cs_last: 10eb69755c7 mask: ffffffffffffffff [ 501.135372][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 501.233371][ T3084] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 501.243014][ T3084] sched_clock: Marking unstable (501425472089, -192104928)<-(501244938461, -11592804) 13:57:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) r4 = openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x180, 0x28, 0x8}, 0x18) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x2000, 0x4) [ 501.332338][T13017] clocksource: Switched to clocksource acpi_pm 13:57:10 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005402}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 13:57:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) dup3(r3, r2, 0x0) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) 13:57:10 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_genetlink_get_family_id$tipc2(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x80000001) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4051) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x3f68, 0x0, 0x0, 0x0, 0x73}, {0x3, 0x4000005, 0x9, 0x0, 0x3, 0x1, 0xff, 0xffffffff00000001}, {0x3, 0x0, 0xe00000000000000, 0x7628}, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}}, 0xa, @in=@multicast2, 0x3506, 0x1, 0x1, 0x80, 0x63, 0x135ee3e6}}, 0xe8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) [ 501.871262][ T32] audit: type=1804 audit(1595167031.053:30): pid=13029 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir861758302/syzkaller.Rxfdef/48/file0/bus" dev="ramfs" ino=37677 res=1 [ 502.045227][ T32] audit: type=1804 audit(1595167031.133:31): pid=13035 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir861758302/syzkaller.Rxfdef/48/file0/bus" dev="ramfs" ino=37677 res=1 [ 502.071960][ T32] audit: type=1804 audit(1595167031.133:32): pid=13029 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir861758302/syzkaller.Rxfdef/48/file0/file0/bus" dev="ramfs" ino=37682 res=1 13:57:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x7, 0xb, 0x2, 0x14, 0x3, 0x0, 0x8]}}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private1={0xfc, 0x1, [], 0x1}, @in6=@mcast1, 0x4e21, 0x0, 0x4, 0x0, 0x2, 0x0, 0x20, 0x16}, {0x8, 0x3, 0x2, 0xd9, 0x7, 0x0, 0x8, 0x3ff}, {0x1f, 0x0, 0xeb28fa78000000, 0x6}, 0x1, 0x6e6bb1, 0x2, 0x1, 0x1}, {{@in6=@mcast1, 0x4d2, 0xcbdc66c82c1a6ac4}, 0x2, @in6=@local, 0x3504, 0x1, 0x0, 0x9, 0x7ff, 0x0, 0x2}}, 0xe8) ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x200a02, 0x0) 13:57:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="bdd9dafc4fbf7b0000ac50"], &(0x7f0000000080)=0x4) sync_file_range(r1, 0x4, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x1ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x7, 0xb, 0x2, 0x14, 0x3, 0x0, 0x8]}}) lstat(0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private1, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x8, 0x3, 0x2, 0xd9, 0x7, 0x3, 0x8, 0x3ff}, {0x1f, 0x0, 0xeb28fa78000000}, 0x1, 0x6e6bb1, 0x2, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x0, 0xcbdc66c82c1a6ac4}, 0x2, @in6=@local, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x2}}, 0xe8) ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x200a02, 0x0) 13:57:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='s', 0x1}], 0x1, 0x81803) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_open_dev$dri(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 13:57:12 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x801, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000240)=0x4) [ 503.327597][ T32] audit: type=1400 audit(1595167032.503:33): avc: denied { sys_nice } for pid=13051 comm="syz-executor.4" capability=23 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 13:57:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:12 executing program 4: 13:57:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:12 executing program 1: 13:57:13 executing program 5: 13:57:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0x188, 0xf0, 0xf0, 0x1c0, 0xf0, 0x240, 0x258, 0x258, 0x258, 0x240, 0x4, 0x0, {[{{@ip={@loopback, @remote, 0x0, 0x0, 'gretap0\x00', 'vlan1\x00', {}, {}, 0x33}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@inet=@length={{0x28, 'length\x00'}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 13:57:13 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000000)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x5) sendfile(r2, r3, &(0x7f00000000c0), 0x9) fcntl$addseals(r3, 0x409, 0xb) fremovexattr(r3, &(0x7f0000000180)=@random={'system.', 'posix_acl_access&)em1)\x00>\vI\x85\xd4P\x94{\xef^\x04\xf8F\xe1I\xfe\xe65\x86\x04\x19\xfb\xbd\xf15+G\xd78\x8e[.\x176S\xf4\x86K[;\xff\'\x84\xe2 \xb9\xa3\xadvJc\n/\xbc\xea\x19C\x04\xe3X\x13\x16U[\xba\f\xe6\v\xcd\xa7\x83Y\x026\xf2]\xe1\x161\xb1Q\x8cu\xc05\xffw\xdc\xd2\x8d\xa9\xef\xae\xd03\"\xc3O\xe3\x05\x84\x84\xe5\xe6\xf8K\xe7\x9d\x86\xb8\xf9w\xc8\x14G\x13\x92\xe3\xcc$X\x148\x8a\x12\xcbO\xec\xfa\xf5\xaa\xf1\xe8\bcL\xa5\xee\x7ft\x13f\x00\x11\xc1\xf8\ba\x05\x04\x00\x00\x00n\x97\x0env\"\xd6\x00\x00\xb0y\x7f\xf9\x91\x03\x88\xfe\xfb\xc5k\x01x\xd8\xfbJ\xf1\x8bk\xbe\xf2(/\x06\xa4\xaeL\x850\xde\x9ewh\xecBz\x9a\xf4\'R\xb3\xf1H\xa9 !G\xff\x062\x85UgC!\xf8l\aX\xb1Y\x01U\x84\x89\xf9KG\x83\xd7\xd6Cq\x1d\"}\xbc5\x9d\xd3\x7f\xf7\x84N\x88\xfcr\xd3\xb3+\x10[\xcfY\x84\xe8\x1a\xcd\xcfk\xe5\xc8(\xcc0X;\xf0_\xb7\xc92\x1eQ\v\x1b\x86Q(\x1b\xb0z\xc7\x960\xab\xf40G\t\xd6\'\xb9\x1dv\"D\xfc\x93H\xd8X\xc6\xf1\x9d\xa2\xe3\xbb'}) tkill(r1, 0x29) 13:57:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'team_slave_1\x00'}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f00000002c0)='\x00', 0x1}, {&(0x7f0000000480)}, {&(0x7f0000000180)="c500c2e930e506c6ff5282917fdb2382dcb4491f3fd288b22f5db64a57fc9c1a013eace89b7b409da80061edc7", 0x2d}, {0x0}], 0x4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r2 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf2#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yi\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x99\x9e\xba\x10\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\x9f\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x11, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 13:57:13 executing program 3: 13:57:14 executing program 1: 13:57:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000080)=0x4) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0b9f73d2"], &(0x7f0000000080)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:57:14 executing program 4: 13:57:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:14 executing program 3: 13:57:14 executing program 1: 13:57:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 13:57:14 executing program 4: 13:57:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:14 executing program 3: 13:57:15 executing program 5: 13:57:15 executing program 1: 13:57:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xffff, 0x87f, 0x40, 0x3f, 0x20, 0x40}, 0xc) setresuid(0xffffffffffffffff, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:15 executing program 3: 13:57:15 executing program 4: 13:57:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:15 executing program 1: 13:57:15 executing program 5: 13:57:15 executing program 4: 13:57:15 executing program 3: 13:57:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f00000001c0)=0xfffff68b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r5, 0x108, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:16 executing program 1: 13:57:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:16 executing program 5: 13:57:16 executing program 4: 13:57:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000000d06010200000000000000000a000007050005003300000005000100070000000500010007000000050005000200000005000100070000002ef981bc08043024d0fc42b3346feb3100fdc99fa67768065822299ea63bd9f5364f7d39bbf8486fbe2c17522e0a1e5e584f83b68cec18947a54efb8573fab6c2469fbe15959308831dc4b5949a0f7408cfbdc2dfc0e1089d3c928445ceebd6c25ea02b01fda5d0ced2c6fc1dadfa86bfd14312e1a299f8fe2793f7f723ef8868ae02dd160f1f02cb6a5fe549bae121dff7aabed20abd4d1c8e78637f0"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setresuid(0xffffffffffffffff, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, r3) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000300)='}\x00') r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x80, 0x22480) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 13:57:16 executing program 3: 13:57:16 executing program 1: 13:57:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:16 executing program 5: 13:57:16 executing program 4: 13:57:16 executing program 3: 13:57:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) ioctl$FICLONE(r2, 0x40049409, r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 13:57:17 executing program 1: 13:57:17 executing program 5: 13:57:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:17 executing program 3: 13:57:17 executing program 4: 13:57:17 executing program 1: 13:57:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="1268a3c020b41e20f011c11b639d00000000"], &(0x7f0000000080)=0x4) r5 = dup3(r0, r4, 0x80000) bind$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x1, @empty, 0x20, 0x3}, 0x20) openat$vcsa(0xffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x610c03, 0x0) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="a4660014533a4ec4c008ca85d700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xc97f, 0x8000, 0xb7e, 0x3ff, r7}, &(0x7f0000000280)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$KDSKBSENT(r8, 0x4b49, &(0x7f0000000000)={0x80, "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"}) 13:57:17 executing program 5: 13:57:17 executing program 3: 13:57:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:17 executing program 4: 13:57:17 executing program 1: 13:57:18 executing program 5: 13:57:18 executing program 3: 13:57:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:fonts_cache_t:s0\x00', 0x23, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:18 executing program 1: 13:57:18 executing program 4: 13:57:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:18 executing program 5: 13:57:18 executing program 3: 13:57:18 executing program 1: 13:57:18 executing program 4: 13:57:18 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00020000"], &(0x7f0000000080)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$tipc(0x1e, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:19 executing program 5: 13:57:19 executing program 3: 13:57:19 executing program 1: 13:57:19 executing program 4: 13:57:19 executing program 5: 13:57:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0x6}, 0xc) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 13:57:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:19 executing program 3: 13:57:19 executing program 1: 13:57:19 executing program 4: 13:57:19 executing program 5: 13:57:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xd3b53) setresuid(0xffffffffffffffff, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:20 executing program 1: 13:57:20 executing program 3: 13:57:20 executing program 4: 13:57:20 executing program 5: 13:57:20 executing program 1: 13:57:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000040)={0x9d0000, 0x5, 0x0, r0, 0x0, &(0x7f0000000000)={0x990a68, 0x3, [], @value=0x7}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="13d65ee107d02d651abb912ab42751d26a9df58ee2409f324f9996f575968c2b4ad279b8e827c93d54f4db30bb76d7752de08c1fbcdc05082662e6e00c6dab96bcfecccdcac9ee8b93b9f376a1c2f3f5037ecbf3efda54cb462e13b2b3d484c98dec9ec1a5845f96564cf51e3bcc4aa847f7ca0fae878aa0e6c9732310f9e0f6287cbbe4dee7573074feefc6473c03273e2c6972f7afbfe9313388e0c01e3320203bb9f74834bac961e26903cdf2358212d5f79df00139d762cefd"], &(0x7f0000000080)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:20 executing program 4: 13:57:20 executing program 3: 13:57:20 executing program 5: 13:57:21 executing program 4: 13:57:21 executing program 3: 13:57:21 executing program 1: 13:57:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) write$snddsp(r3, &(0x7f0000000080)="b85a114cb541ec35ce94030620db71", 0xf) 13:57:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:21 executing program 5: 13:57:21 executing program 3: 13:57:21 executing program 4: 13:57:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:21 executing program 1: 13:57:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101480, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000100)={0xa0, 0x0, 0x7, {{0x3, 0x3, 0x8, 0x2c558ad, 0x81, 0x1, {0x6, 0x40, 0x3, 0xfffffffffffffe00, 0xaeb, 0x3, 0x5, 0x10001, 0x60, 0xff, 0xd13, 0xee00, r4, 0x3, 0x1}}, {0x0, 0x4}}}, 0xa0) 13:57:21 executing program 3: 13:57:21 executing program 5: 13:57:22 executing program 4: 13:57:22 executing program 5: 13:57:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:22 executing program 1: 13:57:22 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000400)={"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"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(r2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0xfffffff, 0x9, 0x9, r4, 0x0, &(0x7f0000000040)={0x9b0908, 0x7, [], @ptr=0x40}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x80, 0x38, "a1b1ffb97957d6b8c40a3e670c9129281612d81633bf87621e66e0dd52fbe54bfe549b5cc47dcd499e9577699d0592016a4e44642981f5a4"}, 0x40) ioctl$RTC_UIE_OFF(r5, 0x7004) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) 13:57:23 executing program 3: 13:57:23 executing program 4: 13:57:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100), 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:23 executing program 5: 13:57:23 executing program 1: 13:57:23 executing program 3: 13:57:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000000)=0xada7) 13:57:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100), 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:23 executing program 4: 13:57:23 executing program 1: 13:57:23 executing program 5: 13:57:24 executing program 3: 13:57:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setresuid(r5, r1, r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) 13:57:24 executing program 4: 13:57:24 executing program 1: 13:57:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100), 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:24 executing program 5: 13:57:24 executing program 3: 13:57:24 executing program 4: 13:57:24 executing program 5: 13:57:24 executing program 1: 13:57:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:25 executing program 4: 13:57:25 executing program 5: 13:57:25 executing program 3: 13:57:25 executing program 1: 13:57:25 executing program 4: 13:57:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x80c880, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@mmap='mmap'}], [{@smackfsdef={'smackfsdef', 0x3d, '))'}}, {@subj_user={'subj_user', 0x3d, '\''}}]}}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f00000001c0)=0x4) ioctl$FS_IOC_SETVERSION(r5, 0x40047602, &(0x7f0000000100)=0x8001) 13:57:25 executing program 5: 13:57:25 executing program 3: 13:57:25 executing program 4: 13:57:25 executing program 1: 13:57:26 executing program 5: 13:57:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xa0040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0x2d, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x16c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc095}, 0x800) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = open(&(0x7f0000000300)='./file0\x00', 0x28c800, 0x100) fsetxattr(r6, &(0x7f0000000340)=@random={'user.', 'devlink\x00'}, &(0x7f0000000380)='0000:00:10.0\x00', 0xd, 0x3) 13:57:26 executing program 3: 13:57:26 executing program 4: 13:57:26 executing program 1: 13:57:26 executing program 5: 13:57:26 executing program 3: 13:57:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffff000, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) write$eventfd(r2, &(0x7f0000000000)=0x1ff, 0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:26 executing program 4: 13:57:26 executing program 1: 13:57:26 executing program 5: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x28}, 0x28) 13:57:27 executing program 3: 13:57:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:27 executing program 4: 13:57:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0xf, r8, 0x38, r9}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:27 executing program 5: 13:57:27 executing program 1: 13:57:27 executing program 3: [ 518.611162][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:27 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:57:27 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 13:57:28 executing program 5: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0) 13:57:28 executing program 3: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000005c0), 0x4) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x500}], 0x13, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13:57:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, 0x0, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x8000, 0x0, 0x2019, 0x4, 0xcf630ea1e626a8e0, 0x7, 0x0, 0x2}}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$bsg(0xffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0xa800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffc72, 0x1d, 0x0, &(0x7f0000000280)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f67a3395095409094409842daaeebb502e93dfd322e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000300)=0x4277) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06464b8, &(0x7f00000000c0)={0x101, 0x9, 0x81, 0xb6b, 0x3, [0x2, 0x4, 0xffd, 0x7fff], [0x80, 0x401, 0x202, 0x7ffffffd], [0x400, 0x3, 0x1, 0xb8], [0x6, 0xfff, 0x1f, 0x100000001]}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x6) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) sched_getparam(0x0, &(0x7f0000000200)) 13:57:28 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 13:57:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:28 executing program 4: 13:57:28 executing program 3: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000005c0), 0x4) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x500}], 0x13, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13:57:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="6f721932748229", 0x7, 0x3}, {&(0x7f0000000140)="ae43535fbb729e81cb025720afcd7b01471cc84a189f27c1fb3b7c59df9805d5bcb9b51cd26aa4b5b73777bbbf4062d303175f93b249a9ea088bdd46eea81c101f472083cd1e729976dd1d0f664fe7f49526c16027079dd0287d8f0e05c8e44a4a0e08c01fcc5fa9320803ce0ebab346cd8f9cb19d49f9d555453c3315823d60548be5fa55c4be199634809f2e90737196fdf9b555e80509299e7f38ec2e8474f50afeb46ce42184f144629c569a9c372e6de0570a468bfab7279e2044f7b849", 0xc0, 0x9}, {&(0x7f0000000200)="86771e87343d5cf4a1bbff942823923092a7d9224b75358a7d9681efedbfd8a8fb950f3ddca5a5d7e1395774be639817796e5659b4ba18caa8194a71cb612a9ed6427dc1b0002ab3ed72787d2869dd709a489ea17c2b59867ad643508ae0cef991a573ffd4e3f0e8b7131c4d74248bab1e27031b1954eb5d7958916cc30b2c87461d89310dc8dd6000e61659f4ec397bb113e18e83", 0x95, 0x2a2f}, {&(0x7f00000002c0)="63edc7bdcbfd0f5d7d0f11f2e7feca96c7d24036cca004e1ef05ec3bccffba75c336daf209879b644c8d8466152df00103e5c3a6a9cfec23cb709c5b7866834b9a50e98afd0bc245d566a55f7eb07310b34dfc59ac020ae0b2bc872eca93558105dbb1ffa1635c82963209d5ee2f856daba660d899e914ceb2a8481e0e185d1a9a23fddd77910c67643d1484836e620187a7ddcf88049c5fb29e3e09368975a890437f63c1a11bcfc79ba4", 0xab, 0x7}, {&(0x7f0000000380)="762b563e9f26c828827ca6a1177c067ce5c0b4bed132a37f3f8954fd4953980143870de03b356fcbadfd4fb77550a7b28135746dc63d4781c70386f67faeb123ea7b1ec2fe9d0e433a7514668bba47b46b023d50b47f39e74192be4e4d4ea69e69219d6402e41937c42ec552a2804dfe4afbf60d02d7e506657fee15a8a47e4e1320e1b1a3ab8393ae0734349f8977e102d30cf8b6e1b9f131fd828003547317dff790c6f00d8fe36f667e4a0f1d42bc50cb6766b551ae425939cb148c2bd74a17e41523a0bdd621", 0xc8, 0xc6de}], 0x104a41c, &(0x7f00000004c0)={[{@nolazytime='nolazytime'}, {@block_validity='block_validity'}, {@minixdf='minixdf'}], [{@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r1}}]}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x37, 0x9]}, 0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:29 executing program 3: 13:57:29 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30001, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 13:57:29 executing program 4: r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000100)={{0x0, @name="c0fdca1146f4a1fc86cecb43c64b257a5c905519d01e4f28a0b44dd5dbf6818d"}, 0x8, 0x6, 0x6}) migrate_pages(r0, 0x8, &(0x7f00000000c0)=0x8001, &(0x7f0000000180)=0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:57:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setresuid(0xffffffffffffffff, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000000)) r6 = getpgrp(r2) ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000000c0)={&(0x7f0000000040)=""/34, 0x22}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 13:57:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0x198, 0x98, 0x1f0, 0x98, 0x0, 0x230, 0x288, 0x288, 0x288, 0x230, 0x4, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'ip_vti0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0xfe01, 'kmp\x00', "3b959eac5d84c743692a0fea97b731b7387ee5ffbde33d329fad7b33b3293dd238a02501c19014fb8c1073a60cc0fa43fd80aaa91e3631d576e2dfd44634b9684ceb4bb727a59e468ebf8920fcd3eaed0ea8efa633d3eec5d08eb38b0a552ac8b34fcde5e3bc246d9e87f76e6c47e03371b00e279d7297f9632deaeca8ebcd92", 0x1d, 0x2}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'syzkaller0\x00', 'vlan0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:57:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d002000098000000000000000000000000000000000000003802000038020000380200003802000038020000040000000000000000000000ac141400ac1414bb0000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000009800e000000000000000000000000000000000000000000028006473637000000000000000000000000000000000000000000000000000000000000000000000480054454500000000000000000000000000000000000000000000000000000100000000000000000000ffff0000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000009800c000000000000000000000000000000000000000000028006c656e6774680000000000000000000000000000000000000000000000000000000001000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xfed8}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 13:57:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="799ba58c571c0ce5818c51fc9e63dfac672f7547ad55558d497a874deb9e82c6e0cb04983f3833d5d3bcdb637118b830b5e0d460347447ee2343b70e33a5b1a2", 0x40}, {&(0x7f0000000240)="d2a02a78f4cc361043d245fefd6b0bc5672672fb38129b33bc6be5d0e8e7146c4da1a757d8bba8f7e55a92c5ae089f6d9464e4c84d2757460c76f67ea57545229b4bd167bb14be538f60afd1a29033e1b8b3783cd885ac5647519c3e2ed2d6e96f7d572e5ff43073e66ca8edd14783436d274a29c781823109aae978e7c607bc071118a8137776ff54f646a395a9c5bc393e5f41da8aaaa8c7d86e1daf543f61a9628395ca56e5745cb5da787e5a004b4e1eab6539e2dabab33e0a6639a2b428540c0b7daa86662d255f4715c5d8de308536f3c13cabe4107923476024888efa0d7873d03605e9a33f", 0xe9}, {&(0x7f0000000340)="7022e62b6762e10fd16636b0f41fb6c071571ed96ebd184798a9b0cd0bfdbae19e62cb0b990361851aa73cdeceba71176870bc51ed4efa73f614fd2ec9b88f3e7d88913a4051173d7423d8a0c8361ebecc0b7ec4e63cb908bef5625243894c6c27ed95e64d9321dfbf1e9e1a6aae1b3efd7fd7a01a0f6db198dc2d49ef330a8b11e06c6b26799596d040ece16bdf3f3c2a9dcd606ee605195be5710b4f1078799d07c5e31210439bc6b7c3533b1cdc498d644907ee7a7d1e7e3ddfc24fe0edd891c5f9258a4ab23286878d19fbc29cadf83913e80d65426003941d", 0xdb}, {&(0x7f0000000440)="6df1f08e45626874bbbb1cccab065a7cfc4faa6796e857cc9e6bd9d946dbf6fed0b08a788974499f9006d143fdf5312a3ce18b7c048c2079a33d700e8adb15308c5ccaa2e9459e8bd090542628481b33c1fb5b3a085862b50f4707a6f8387c319a1e7f98e503ff43a388bc719c4b19673b561e498c29797884ed1030fe3c12e0ef4e74acdfdff95b83a82b02ad7185e93aee458ed66786780b16acf52ee1ecb0ac19aa09443ec68d0ba5c3330feab4d504f272264cb90ccdd16e517837d13cfea5ed45ca0b62c452af5341b32c", 0xcd}, {&(0x7f0000000540)="8f1eeee329612ee377feb0850b53b4ebee7ed9c14602ba67b656a42a932713ec1e1bab67af68a3e1791126b7fb7486a3b06df57c7d800f588f09e186c5279c1b4655b7f74b4c", 0x46}], 0x5, &(0x7f0000000600)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @local, @broadcast}}}], 0x18}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) accept4$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'tunl0\x00', r8, 0x40, 0x0, 0x7f, 0x7, {{0xe, 0x4, 0x0, 0xa, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0xf, 0x45, [@dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @multicast1]}, @timestamp={0x44, 0x14, 0xec, 0x0, 0x1, [0x2, 0x6, 0x7, 0x7]}]}}}}}) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) 13:57:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:30 executing program 1: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) migrate_pages(r0, 0x8, &(0x7f00000000c0)=0x8001, &(0x7f0000000180)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') 13:57:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 13:57:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x28}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_DIRTY_TLB(r4, 0x400caeaa, &(0x7f0000000100)={0x2, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f00000000c0)={r0, 0x2}) 13:57:30 executing program 5: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) migrate_pages(r0, 0x8, &(0x7f00000000c0)=0x8001, &(0x7f0000000180)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2026c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x8000000200036150, 0x200800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:57:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'macroman'}, 0x3d}]}) 13:57:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:31 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 522.442957][T13432] hfs: unable to load iocharset "macroman=" [ 522.449237][T13432] hfs: unable to parse mount options 13:57:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r3, 0xffffffffffffffff) setresuid(r3, 0x0, 0xffffffffffffffff) 13:57:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6c6f636b70726f746f3d6c6f636b5f6e83a1c6aa8d0eb1f779255a7d625d60923dcb9f09122b2977df63a6b06e0547ba6bb7c2b8aa910878a1bb8137a31ea979c1a17604bbc18abe914b"]) 13:57:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000002440)={0xa00000, 0x78, 0x100, r0, 0x0, &(0x7f0000002400)={0x3007a, 0x0, [], @p_u32=&(0x7f00000023c0)=0x1}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, r4, 0xab9535e9a6578fc1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x16000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, r4, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8084) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) setsockopt$inet_int(r7, 0x0, 0x0, &(0x7f0000000000), 0x4) 13:57:32 executing program 4: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000240)={'team_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) migrate_pages(r0, 0x8, &(0x7f00000000c0)=0x8001, &(0x7f0000000180)=0x2) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2026c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x8000000200036150, 0x200800007b, 0x0, 0x0, 0x0, 0x10000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:57:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 523.064236][T13452] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 523.124226][T13454] gfs2: not a GFS2 filesystem [ 523.158329][T13456] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 13:57:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 13:57:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_RATE={0x10, 0x6, {0xfffffffd, 0x97, 0x8cd5}}]}]}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:57:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b8446b9bbc7a46c1dc97a279172bfa", 0x4c}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 13:57:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 523.718906][T13473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.825921][T13473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:57:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000100)=""/251, 0xfb) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 13:57:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x282002, 0x0) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000080)={0x1c, 0x0, 0xc, 0xa, 0x4, 0x81}) 13:57:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f00000000c0)=0x8001, &(0x7f0000000180)=0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) 13:57:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000100)=""/251, 0xfb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 13:57:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x1, 0x209e28, 0x1, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x40) 13:57:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 13:57:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x74}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000023000535d25a80648c63940d0624fc60100002400a000200051a82c137153e670402018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 13:57:34 executing program 1: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000, 0x10}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 524.991002][T13509] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 524.999464][T13509] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 525.007587][T13509] netlink: 250 bytes leftover after parsing attributes in process `syz-executor.3'. 13:57:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:57:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x40ec2) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_read_part_table(0x400, 0x8, &(0x7f0000000800)=[{&(0x7f0000000380)="8be788ad386bf778e90ef312d9665299f0bf2ce687361a0cfea1bf62ce9af2414a1b0156305e8004b09f049cc9a7e0902ddf8db42385c85e65c2ad7c09478206f7fcccfce2dac6e3ceb8e421b6aa2a6f3efafa9d6ceb722e4d2244bbffe17813c1d050a58963b14db8616c7a4e0398712eb1a89af1ba967bfeadcc3001fe6c4a713730f617c3bff2031ef2e2989beb38af6d3facb81d9dc3", 0x98, 0x8}, {&(0x7f0000000440)="ff706ebb7c03269427be9ba37fafadba9afc993a4cbce7122d6b543e2f0fdc43080c7a50024cb60b400540440f1df28dd867e587c3dc6e52e1f347002daf5c23b1fbabe9c07826b63c3e79c9103a5a0860c14422dd95c0b44da331a0ad4dd059c86f9c3e51d555f65c4a3aef6a6e1d36631098c3d0ee1e0444a183a13b9a9b948ca1c3d45face97bf8c85acc", 0x8c, 0x2}, {&(0x7f0000000a00)="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", 0x157, 0x5}, {&(0x7f00000005c0)="0eb957be871487042f1903878dbbd17afcdcb207b7cb0274cba93a1a89d212cfec60c9ad7dddea420df0ac09d0c3abf7f8c88c4297d0208c0f56f84b111b5ee7a7f7958c137e42b2796f3cd69870fa0a23e406bfc77b5bdfcef9e7cdcb42abeabceb3df82b4b2c5f8ec5ab7d05240e521fee326097f7f7e1988e67f0d95b7f4f6de1d1f6da5a3e3573eda9a438c95e1bec5888a3d483eb67c481d13f776fc9f5f1854aa7f584a613b46d", 0xaa, 0x9}, {&(0x7f00000009c0)="c563c3bb865b618568f0e8eb6612df192012b78a0aa563f718db167c", 0x1c, 0xfffffffffffffff9}, {&(0x7f00000006c0)="a4bec561c4d6490db7abcf46033f59de0c0271009ad296313f017f7c0a741fe21927389ab9301a171eda51ce225a972e4a456b861813297b2c6e722612dfece645af2a83dec7be2289540cc6b8c4c534221f40a4da867d23954d63d23917d4ed821d2f522be239e237a833bad436df248b1820b9bfb31cfc0cc7", 0x7a, 0x9}, {&(0x7f0000000740)="f80bc2b4c9453759b51ce8b8a5bb0d6bacfb8d1bca41963adfe93c9141335476861cc9fce2e1e115bdd2230e0d36a4397b991c3229fc7c7a1f54af19ca4ceea2b40be01464cda002830e8b7c63a64f7f54", 0x51, 0x2}, {&(0x7f00000007c0)="1c", 0x1, 0xb589}]) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x80, 0x4) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) [ 525.213916][T13511] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 525.222246][T13511] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 525.230518][T13511] netlink: 250 bytes leftover after parsing attributes in process `syz-executor.3'. 13:57:34 executing program 5: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000240)={'team_slave_0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) migrate_pages(r0, 0x8, &(0x7f00000000c0)=0x8001, &(0x7f0000000180)=0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:57:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d002000098000000000000000000000000000000000000003802000038020000380200003802000038020000040000000000000000000000ac141400ac1414bb0000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000009800e000000000000000000000000000000000000000000028006473637000000000000000000000000000000000000000000000000000000000000000000000480054454500000000000000000000000000000000000000000000000000000100000000000000000000ffff0000000073797a6b616c6c65723100000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000deffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000070000009800c000000000000000000000000000000000000000000028006c656e6774680000000000000000000000000000000000000000000000000000000001000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 13:57:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:57:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 13:57:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 13:57:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) 13:57:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:57:36 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') sendfile(r2, r3, 0x0, 0x320f) 13:57:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4}}]}, 0x34}}, 0x0) 13:57:36 executing program 3: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:57:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) [ 527.765351][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:57:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$radio(0x0, 0x0, 0x2) 13:57:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 13:57:37 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0xc, &(0x7f0000000080)="033db656", 0x4) 13:57:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x101) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp6\x00') sendfile(r2, r3, 0x0, 0x320f) 13:57:38 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:38 executing program 2: 13:57:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000023000535d25a80648c63940d0624fc60100002400a000200051a82c137153e670402018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 13:57:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080), 0x4) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) 13:57:38 executing program 2: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 529.476539][T13617] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 529.484905][T13617] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 529.493305][T13617] netlink: 262 bytes leftover after parsing attributes in process `syz-executor.5'. 13:57:38 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in6=@private1, @in6=@dev}, {@in=@dev, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) 13:57:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0x4, r2}]}, 0x28}}, 0x0) 13:57:41 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"a2e3ad21ed6b52f99cfbf4c087f719b4d026e7ff7fc6e5539b36710e8b546a1b444b94370890e0878fdb1ac6e704e366b4956c409b3c2a5b67f3988f7ef31952a981ffe8d178708c523c921b1b5a4b0a169b5b9b36cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179cef309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900000000000000a85e89c46329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f19001800000bc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710acf2e31caa04b2e286bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb7dc7ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6f00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd9432971215d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081f758cefcce3fbf4625a7e7de40e42e07b34449e15eb0305626afb1dd179b8a065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40595af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea40686e730861e83d89d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7d528ed15b97c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a283e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90", 0x597}}, 0x1006) 13:57:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x101) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') sendfile(r2, r3, 0x0, 0x320f) 13:57:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) r3 = openat$proc_capi20(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x84201, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21400200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24010}, 0x4000000) ioctl$KDMKTONE(r2, 0x4b30, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setresuid(0xffffffffffffffff, r1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 13:57:41 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:42 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='cubic\x00', 0x6) 13:57:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) 13:57:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 13:57:42 executing program 4: ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:42 executing program 5: mq_unlink(&(0x7f00000001c0)='.-}\x00') [ 533.432233][T13660] skbuff: bad partial csum: csum=16448/0 headroom=64 headlen=3712 13:57:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newaddr={0x17, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_CACHEINFO={0x14}]}, 0x34}}, 0x0) 13:57:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') sendfile(r0, r1, 0x0, 0x320f) 13:57:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"a2e3ad21ed6b52f99cfbf4c087f719b4d026e7ff7fc6e553f836500e8b546a1b444b940d0890e0878fdb1ac6e704e366b4956c409b3c2a5b67f3988f7ef31952a981ffe8d178708c523c921b1b5a4b0a169b5b9b36cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179cef309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900000000000000a85e89c46329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f19001800000bc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710acf2e31caa04b2e286bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb7dc7ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6f00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd9432971215d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081f758cefcce3fbf4625a7e7de40e42e07b34449e15eb0305626afb1dd179b8a065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40595af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea40686e730861e83d89d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7d528ed15b97c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a283e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90", 0x597}}, 0x1006) 13:57:43 executing program 4: ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:43 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll, &(0x7f0000000080)=0x80, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00b23400000000000000000030b6dea64a3cb8439c4faed42bdc7e084b6bd00ecbb18d6a3e6355eb7c5bbd0c6da14eea503b040827b6ce10847943317c25fbf17ca7e13952f2a0281b17418b13365c23bfe8dca8399199391539f58b2cf91c3383f16f69751b48f64fc829014f1f68071966729019568e5528e6922ed5ef0e397ced801d81191bb8cb4dd3a0e15782a5ea", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa607a5e34794710bdaaaaaa0000e90c300000000000000000000000000200"/47, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="49de8464c9223fd16c062a52b05fd333338768b2b39e76f6d25dca2fe35f6d051d74e5579adaa24a3bdcdd0fedfc542762eb44e9d2c436b82404bba160a846ae706a7f65ead0d6ebf533ea29f5bb4514533d1d8fcef0751e7e79da7213993b454767873648c4ec01697b9fed2ff950468a99c64767d51727ba05c4286fd913e4b24d42aa66945ca43b71075d76a4b29fd964c9393e2e734be4d869e5a94c352a88516ece74fcfafc7f2ba99b4a31bb5109c8bd9a604eeb0608052824f79b29bc2e152782c1f663948139ac919ae09f40923337250b0a4622425ca35ed9a28ca33d47b330fbc2c55cdf8295"], 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400d36d887e0939070040b3010064edb6820fc720471ebf868ea124feac4f2e3302c34546c91410b123deed91e4b5fd5f46fbaa7b8f800c762aa86ace6ad9c4d3d1b48965338032eaae969d6e2a45345c9e6ee33bb7ceb819716776a5a1b7864ed8321a15824456a9ec84f345434d15d10fa031d8f0aade89cc19788e6638b5ad919599fb3ca98655c819dd1277d428d6e8207853eb70ea23e02c181f03e43892d41fb39337793c86800be7a96af493663597f42be7e7d5ae097a", @ANYRES16=r2, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @rand_addr=0x64010100}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '(\\@\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) 13:57:43 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x36}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x8000, 0x0, 0x0, 0x1f, 0x8000}, 0xc) unshare(0x40000000) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$netrom(r3, &(0x7f0000000700)="2927a0ecca2d9860494e693bfbd6fbeeae02df66551765c868c2919105343774905096fb91b7e3992c3a7e1fc6ec5057dc43347842", 0x35, 0x4c080, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x0) write$P9_RSTATu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0xfb) 13:57:43 executing program 1: clone3(&(0x7f0000002640)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002600)=[0x0, 0x0, 0x0], 0x3}, 0x58) [ 534.404993][T13683] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 534.496310][T13683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13683 comm=syz-executor.0 [ 534.538703][T13688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13688 comm=syz-executor.0 13:57:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) [ 534.719171][T13694] IPVS: ftp: loaded support on port[0] = 21 13:57:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 13:57:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0}]) 13:57:44 executing program 4: ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETVNETBE(r0, 0x54e3, 0x0) [ 535.564608][T13696] IPVS: ftp: loaded support on port[0] = 21 13:57:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) 13:57:44 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r6, 0xffff}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) [ 536.297302][T12349] tipc: TX() has been purged, node left! 13:57:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000006c0)='0', 0x1, r0) 13:57:45 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') sendfile(r0, r1, 0x0, 0x320f) 13:57:45 executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) 13:57:45 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:46 executing program 2: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:57:46 executing program 3: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:57:46 executing program 1: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:57:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400200, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0x3c5, 0x4) openat$sequencer(0xffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x800, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x44800) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) signalfd4(r5, &(0x7f00000001c0)={[0x8, 0xffff]}, 0x8, 0x800) 13:57:46 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x541e, 0x0) 13:57:46 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x9, 'vlan0\x00'}) 13:57:47 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0x7f, 0x7, 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) 13:57:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) 13:57:47 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') sendfile(r2, r3, 0x0, 0x320f) 13:57:47 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 13:57:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) setresuid(0xffffffffffffffff, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:48 executing program 1: clone3(&(0x7f0000002640)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002600)=[0x0], 0x1}, 0x58) 13:57:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) 13:57:48 executing program 3: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:57:48 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 13:57:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000008c00)='net/ip_mr_cache\x00') sendfile(r2, r3, 0x0, 0x320f) 13:57:49 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x2000000000000033, 0x0, 0x0, 0x0) 13:57:49 executing program 2: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000, 0x0, 0x6400}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:57:49 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 13:57:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) [ 540.588654][T12349] tipc: TX() has been purged, node left! 13:57:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000040)={0x990000, 0x4, 0x80000000, r2, 0x0, &(0x7f0000000000)={0x9d0001, 0x200, [], @value=0xfffffffd}}) ioctl$CAPI_INSTALLED(r3, 0x80024322) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400008a00000b0f00"/20, @ANYRES32=r8, @ANYBLOB="000000000000f3ff00000000"], 0x24}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004300)={&(0x7f0000003d40)={0x59c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x65}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x8, 0x2, 0xff, 0x1f}, {0x6, 0x1, 0x3, 0x45c}, {0x2, 0x7, 0x66, 0x3}, {0x78eb, 0x3, 0x0, 0x6}, {0x5, 0x20, 0x5, 0x8}, {0x800, 0x2, 0x4c, 0x8}, {0x2, 0x7f, 0x40, 0xff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x92}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x8004}, 0x44) 13:57:50 executing program 4: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x571, 0x0, 0x3, 0x8, 0xc0010140]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:57:50 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 13:57:50 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_DEBUG={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) write$FUSE_LSEEK(r7, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x62}}, 0x18) ioctl$TIOCEXCL(r8, 0x540c) setresuid(0xffffffffffffffff, r6, 0x0) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) 13:57:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in6=@private1, @in6=@dev}, {@in=@dev, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x0, 0x0, @private2}, 0x1c) ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0) 13:57:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETVNETBE(r0, 0x800454dd, &(0x7f0000000040)) 13:57:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) 13:57:51 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r5, 0x9}, &(0x7f0000000040)=0x8) setresuid(0xffffffffffffffff, r1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) 13:57:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETVNETBE(r0, 0x401054d5, &(0x7f0000000040)) 13:57:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108030f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e00030040fefeff050005001201", 0x2e}], 0x1}, 0x0) 13:57:52 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3}) 13:57:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 13:57:52 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETVNETBE(r0, 0x400454dc, &(0x7f0000000040)) 13:57:52 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 13:57:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000080)=0x4) r6 = accept4(r5, 0x0, &(0x7f0000000140), 0x800) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x441b}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x184) setresuid(0xffffffffffffffff, r1, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) [ 543.946935][T13940] @þþÿ: renamed from team0 [ 543.999187][T13940] 8021q: adding VLAN 0 to HW filter on device @þþÿ 13:57:53 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r0, 0x0) 13:57:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 13:57:54 executing program 2: socket$inet6(0xa, 0x3, 0x101) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') sendfile(r0, r1, 0x0, 0x320f) 13:57:54 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x0) 13:57:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000000)={0x6, 0x4}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x5, 0xfe, 0x0, 0x7f, 0x9a, 0x3, 0x3f, 0x8, 0xf9, 0x1, 0x6, 0x4, 0x7c}, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 13:57:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 13:57:54 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0x153d}}) 13:57:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2ba003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000140)="207ef39c5f3eb0bda7a300babe2bfe12b33cda3cc0ff5c560ec27c70f6703395095409094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c3a494a7f4c8474ede3d1a0c09bd2e1a614d783c46678dc4b15ddb2e70822"}, 0x40) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x6, {0x8}}, 0x18) setresuid(0xffffffffffffffff, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 13:57:54 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0xac141424, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1}}, 0x48) keyctl$set_reqkey_keyring(0xe, 0x4) 13:57:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5385, &(0x7f0000000000)=0xffffff00) 13:57:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') sendfile(r2, r3, 0x0, 0x320f) 13:57:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x2000ff8e}]) 13:57:55 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x5425, 0x0) 13:57:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:55 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:57:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 13:57:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x1, 0x209e28, 0x1, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x40) 13:57:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 13:57:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 13:57:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$minix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:57:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), 0x4) 13:57:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x0, 0x0, @private2}, 0x1c) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) 13:57:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) 13:57:56 executing program 5: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) 13:57:56 executing program 0: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000, 0x0, 0xff00}, 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 547.390172][T14052] sctp: [Deprecated]: syz-executor.3 (pid 14052) Use of int in max_burst socket option deprecated. [ 547.390172][T14052] Use struct sctp_assoc_value instead [ 547.561850][T14058] sctp: [Deprecated]: syz-executor.3 (pid 14058) Use of int in max_burst socket option deprecated. [ 547.561850][T14058] Use struct sctp_assoc_value instead 13:57:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000180), 0x4) r0 = socket(0x26, 0x5, 0x0) close(r0) 13:57:57 executing program 4: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 13:57:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 13:57:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0xc8}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108030f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e00030040fefeff050005001201", 0x2e}], 0x1}, 0x0) 13:57:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:57 executing program 5: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 13:57:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x0) 13:57:58 executing program 2: [ 549.004852][T14084] @þþÿ: renamed from team0 [ 549.061958][T14084] 8021q: adding VLAN 0 to HW filter on device @þþÿ 13:57:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:58 executing program 0: 13:57:59 executing program 2: 13:57:59 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:57:59 executing program 5: [ 550.937652][T14101] 8021q: adding VLAN 0 to HW filter on device @þþÿ 13:58:00 executing program 4: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:58:00 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:58:00 executing program 3: 13:58:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x101) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') sendfile(r2, r3, 0x0, 0x320f) 13:58:00 executing program 2: 13:58:00 executing program 5: 13:58:00 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0x7) 13:58:00 executing program 2: 13:58:01 executing program 0: 13:58:01 executing program 5: 13:58:01 executing program 3: 13:58:01 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 13:58:01 executing program 4: 13:58:01 executing program 2: 13:58:01 executing program 0: 13:58:01 executing program 5: 13:58:01 executing program 3: 13:58:02 executing program 2: 13:58:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 13:58:02 executing program 4: 13:58:02 executing program 0: 13:58:02 executing program 5: 13:58:02 executing program 3: 13:58:02 executing program 2: 13:58:02 executing program 4: 13:58:02 executing program 5: 13:58:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 13:58:02 executing program 0: 13:58:02 executing program 3: 13:58:02 executing program 2: 13:58:03 executing program 4: 13:58:03 executing program 5: 13:58:03 executing program 0: 13:58:03 executing program 2: 13:58:04 executing program 3: 13:58:04 executing program 4: 13:58:04 executing program 1: 13:58:04 executing program 5: 13:58:04 executing program 0: 13:58:04 executing program 2: 13:58:04 executing program 3: 13:58:04 executing program 4: 13:58:04 executing program 5: 13:58:04 executing program 1: 13:58:04 executing program 0: 13:58:04 executing program 4: 13:58:04 executing program 2: 13:58:05 executing program 5: 13:58:05 executing program 3: 13:58:05 executing program 0: 13:58:05 executing program 1: 13:58:05 executing program 2: 13:58:05 executing program 5: 13:58:05 executing program 4: 13:58:05 executing program 3: 13:58:05 executing program 0: 13:58:05 executing program 1: 13:58:05 executing program 2: 13:58:05 executing program 5: 13:58:06 executing program 4: 13:58:06 executing program 0: 13:58:06 executing program 1: 13:58:06 executing program 3: 13:58:06 executing program 2: 13:58:06 executing program 4: 13:58:06 executing program 5: 13:58:06 executing program 1: 13:58:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x5427, 0x0) 13:58:06 executing program 3: 13:58:06 executing program 2: 13:58:06 executing program 4: 13:58:06 executing program 5: 13:58:07 executing program 1: 13:58:07 executing program 3: 13:58:07 executing program 0: 13:58:07 executing program 2: 13:58:07 executing program 4: 13:58:07 executing program 5: 13:58:07 executing program 1: 13:58:07 executing program 2: 13:58:07 executing program 0: 13:58:07 executing program 3: 13:58:07 executing program 4: 13:58:07 executing program 5: 13:58:07 executing program 1: 13:58:08 executing program 2: 13:58:08 executing program 0: 13:58:08 executing program 3: 13:58:08 executing program 4: 13:58:08 executing program 5: 13:58:08 executing program 1: 13:58:08 executing program 0: 13:58:08 executing program 3: 13:58:08 executing program 5: 13:58:08 executing program 2: 13:58:08 executing program 4: 13:58:08 executing program 1: 13:58:08 executing program 0: 13:58:08 executing program 3: 13:58:09 executing program 2: 13:58:09 executing program 5: 13:58:09 executing program 4: 13:58:09 executing program 1: 13:58:09 executing program 0: 13:58:09 executing program 3: 13:58:09 executing program 5: 13:58:09 executing program 2: 13:58:09 executing program 4: 13:58:09 executing program 1: 13:58:09 executing program 0: 13:58:09 executing program 3: 13:58:09 executing program 5: 13:58:10 executing program 2: 13:58:10 executing program 4: 13:58:10 executing program 1: 13:58:10 executing program 0: 13:58:10 executing program 3: 13:58:10 executing program 5: 13:58:10 executing program 2: 13:58:10 executing program 4: 13:58:10 executing program 0: 13:58:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 13:58:10 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5016, 0x0) 13:58:10 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:11 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll, 0x80) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x2, 0x40012123, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) pipe(&(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r4 = socket(0x0, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9172b8b44fbbb67936a57ae7805c544ae0b8a97075d03739a9b1d5f7dd8193f4101d6f970a7f173ac5f53e4466e860e370182e77bcf9eac238a8dbcf29805f44bab3133fe877120dc8346e40bb3a72704f22861f53338b4fc666a320046cc5d57b1a76d6b2c48aa310b9aa75d6d308c2817fe057c2886649e2f8625159366f162de073c207afd62b54905d0e73441809b2992aec286722b75b145d650c7ab77614a71535dca5ba9c51e69278adadbcbe04a2844be83a", @ANYRES16=r3, @ANYBLOB="020026bd7000fcdbdf25030000005000018008000100", @ANYRES32=r5, @ANYBLOB="080003000200000014000200736974300000000000000000000000001400020067656e65766531000000000000000000140002006970366772657461703000000000000005000500200000000500020054000000"], 0x74}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 13:58:11 executing program 0: 13:58:11 executing program 4: 13:58:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000200)) 13:58:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'vxcan1\x00', 0xfd}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r1, r2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x8, 0xab, 0x2}) 13:58:11 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r0, r1) 13:58:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 13:58:12 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050017", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="08003400030000000500370001000000080032010000000008003c008000000008000b00001000000500350006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x4c000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000002940)=ANY=[@ANYRES16, @ANYBLOB="200026bd7000fcdbdf25000000000c00030004000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004011) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x842) 13:58:12 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 13:58:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 564.188820][T14327] kvm [14325]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 13:58:13 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010003fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c000280050009006f"], 0x3c}}, 0x0) 13:58:13 executing program 5: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 13:58:13 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x141801, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 13:58:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x4000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 13:58:14 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000180)='0', 0x20000181}, {&(0x7f00000005c0)='3', 0x1}], 0x2) 13:58:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x14}}, 0x0) socket(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0xb900) 13:58:14 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x500) 13:58:14 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045006, &(0x7f0000000000)) 13:58:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:58:14 executing program 5: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000140)) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/timer\x00', 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x6}, 0x0, 0x0) 13:58:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="08003400030000000500370001000000080032010000000008003c008000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004011) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x842) 13:58:15 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') 13:58:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r1, r2) 13:58:16 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044324, 0x0) 13:58:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r1, r2) 13:58:17 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 13:58:17 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000003280)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x80, 0x0}}], 0x1, 0x0) 13:58:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x500) 13:58:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827f0000431ca711fcd0cdfa14000800000000000071f60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38f2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18c912ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c97278087001460f7cf5ef5ecdd65ede8d799018fc043a6560fc12c26694dc05f3ee22feea1834ddbda7f4226a1f280b75d279afeabe0839c50851ffded7714dc486acf373a8268f99d0bd888a06070de197afe04"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20001380, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632f77fbac14140de934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 13:58:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 13:58:17 executing program 1: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRESHEX], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x0, 0x0, 0x96010200}]) 13:58:17 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:18 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 13:58:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050017", @ANYRES32, @ANYBLOB="00000000ffffffff000000"], 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="08003400030000000500370001000000080032010000000008003c008000000008000b00001000000500350006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4c000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000081}, 0x20004011) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x842) 13:58:19 executing program 2: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYRESHEX], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 13:58:19 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:19 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8f, &(0x7f0000000e40), 0x2}], 0x8d9, 0x0) 13:58:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) dup3(r0, r1, 0x0) 13:58:20 executing program 5: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 13:58:20 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) 13:58:21 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827f0000431ca711fcd0cdfa14000800000000000071f60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38f2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18c912ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c97278087001460f7cf5ef5ecdd65ede8d799018fc043a6560fc12c26694dc05f3ee22feea1834ddbda7f4226a1f280b75d279afeabe0839c50851ffded7714dc486acf373a8268f99d0bd888a06070de197afe04"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632c77fbac14140de934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 13:58:21 executing program 0: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1f16, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 13:58:21 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045003, &(0x7f0000000000)=0x500) 13:58:21 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:21 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000005c0)='3', 0x1}], 0x2) 13:58:22 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:23 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x123402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000200040000009600000000000000a4000000000000000000", 0xffffffe5}], 0x2) readv(0xffffffffffffffff, &(0x7f0000000440), 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 13:58:23 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:23 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0xc0001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 13:58:23 executing program 2: 13:58:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x0, @dev}, 0x10) 13:58:23 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:58:24 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 13:58:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:58:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x842) 13:58:24 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:58:25 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc004500a, &(0x7f0000000000)) 13:58:25 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:25 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045003, &(0x7f0000000000)) 13:58:25 executing program 0: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:25 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff1d004000632f77fbac14140de934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 13:58:25 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:58:26 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:58:27 executing program 4: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 13:58:27 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:58:27 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:27 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:58:27 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x8000}) 13:58:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:58:28 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0x8010500c, &(0x7f0000000000)) 13:58:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 13:58:28 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:58:28 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:28 executing program 3: write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:28 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000380)={0xfb, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x04n;%H\xe6\xc3\x85\xa4ox%\x00'/30, 0x2f, 'g>\xff\xeb\t\xb55\x1f[\x051@\x00\x00.\xaf\x18\xff\xc4\x9a]\xd5j\xadP\\g\xa0{d+\x1b\x9c\xf0t\xb4\xdbq=\x87\x82\xd9\x8a$\xbc\xb5\x00', 0xb, 'cgro\x98ppppP\x97', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xc2\xf3\x85@\x9a\xc6\x00\x96\xd5\xc4\x8f\xff\xc6;;\x9e\x05\x00\xc3\xa8RH&\xb2\xb4\xa8\x8e\x01zwW2\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00k\xa1Z\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\r\xbe6\xf4\xf5\x1aL\xc2\x80\xe8\xd4\x89\xd3d\x9a7'}, 0x7, 'v/nbs#\x00'}}, 0xfb) 13:58:28 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:30 executing program 3: write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:30 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 13:58:30 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:30 executing program 2: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 13:58:31 executing program 3: write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x1f40) [ 582.089566][T14610] binder: 14605:14610 ioctl 40046205 0 returned -22 [ 582.911242][T14616] binder: 14605:14616 ioctl 40046205 0 returned -22 13:58:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000fefffdff00020000001400020064756d6d0100000000000000000000000900010073"], 0x34}}, 0x0) 13:58:32 executing program 1: r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:32 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:32 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:32 executing program 2: msgrcv(0x0, 0x0, 0x0, 0xd6d0c418f59fe7d3, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2}}) 13:58:32 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x80045017, &(0x7f0000000000)) 13:58:32 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:32 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:33 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 13:58:33 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000005c0)='0', 0x1}], 0x2) 13:58:33 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:33 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:34 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:34 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000005c0)='0', 0x1}], 0x2) 13:58:35 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:58:35 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000005c0)='0', 0x1}], 0x2) 13:58:35 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:35 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:35 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:58:36 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 13:58:36 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000005c0)='0', 0x1}], 0x2) 13:58:36 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:36 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:36 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:58:36 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:36 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:36 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:58:36 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x4) 13:58:37 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:37 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:58:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r1, r2) readv(0xffffffffffffffff, &(0x7f0000000100), 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x8, 0xab, 0x2}) 13:58:38 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 13:58:38 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:38 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:58:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'ip6gre0\x00'}]}, 0x2c}}, 0x0) 13:58:38 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) [ 589.798166][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 589.944341][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:58:39 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:39 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:58:39 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xffd1) 13:58:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x29}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:58:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup2(r1, r3) 13:58:39 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:40 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xffd1) 13:58:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:40 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_NEWSETELEM={0x14, 0x5, 0xa, 0x0, 0x0, 0x0, {0x1}}], {0x14}}, 0x70}}, 0x0) 13:58:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010003001404000001007d60b7030000000000006a0a00fe00000000850000001f000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x17b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 13:58:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:40 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xffd1) 13:58:40 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xc0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=0x6}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xfffffff0, r1}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, r1}, 0x8) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xda880bc1456dd973}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f00000001c0)={0x4d, "05eefae6bd6d2ed46371cdde85b201e86397dd59cdc15a7096c0b7d6834fb125529544913ee739143c8fca2ca4bd845f5008fc6519a5caa612fb250ed12fb34df863642164c9965cfb857bf5e2c7550037ad8b195af7e301606065c5ed60197db0bdcf9022d76a49ba1a9d6362fe6da68b81291aad439bd65cdda3af1df8fdbb"}) accept4$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000005eb943d1332a264ddfc632b1b9ee321f00000000000000e0c0623eef81daa25d48000000"], 0x3c}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xb2}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x74}}, 0x0) 13:58:41 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="660fc730b9800000c00f3235000400000f300f2286660f4e2b640fc7a90000000066bad00466b8f5ff66efb9080200000f32b8010000000f01d9ea5a8d00003b013e8ec3", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:58:41 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 592.188234][T14765] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:58:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:41 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:42 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25", 0x8}], 0x1}, 0x0) 13:58:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000040)={0x14}, 0xfffffdef) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe2000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:58:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:42 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:42 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:42 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e449c38a94b27a298884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd5b8473375274cc5c1e298a16324fe27da2a9d5ba9ff3c009d3", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000940)='u', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000980)=""/244, 0xf4, &(0x7f0000000080)={&(0x7f0000000180)={'tgr160\x00'}}) 13:58:42 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:58:43 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:43 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll, 0x80) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r4, 0x0, 0x8000000}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="010000007fffffff0200000000000000", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="01d9ae26b7"], 0x4058}}, 0x0) 13:58:43 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:43 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 594.156098][T14817] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 594.191741][T12349] Bluetooth: hci0: Frame reassembly failed (-84) 13:58:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:43 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:43 executing program 4: getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x20001280) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000001340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x20000000, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1233bf, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x9effffff}, 0x0) 13:58:43 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:44 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:44 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) [ 596.208200][ T8610] Bluetooth: hci0: command 0x1003 tx timeout [ 596.214628][T14820] Bluetooth: hci0: sending frame failed (-49) [ 598.288292][ T31] Bluetooth: hci0: command 0x1001 tx timeout [ 598.294531][T14820] Bluetooth: hci0: sending frame failed (-49) [ 600.368284][ T31] Bluetooth: hci0: command 0x1009 tx timeout 13:58:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:58:53 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:58:53 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:53 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:58:53 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) 13:58:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:54 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:58:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 13:58:54 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) [ 605.095777][T12349] Bluetooth: hci0: Frame reassembly failed (-84) [ 605.114889][T14939] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 13:58:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:58:54 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) [ 607.088191][ T31] Bluetooth: hci0: command 0x1003 tx timeout [ 607.094597][T14820] Bluetooth: hci0: sending frame failed (-49) [ 609.168585][ T8610] Bluetooth: hci0: command 0x1001 tx timeout [ 609.174785][T14820] Bluetooth: hci0: sending frame failed (-49) [ 611.248485][ T8610] Bluetooth: hci0: command 0x1009 tx timeout 13:59:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:04 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:04 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x22453f31}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 13:59:04 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:59:05 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 616.053659][T10863] Bluetooth: hci0: Frame reassembly failed (-84) [ 616.102838][T14987] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 13:59:05 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:05 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:59:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0x6800000000000000) 13:59:05 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:06 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) [ 618.138574][ T31] Bluetooth: hci0: command 0x1003 tx timeout [ 618.147695][T14820] Bluetooth: hci0: sending frame failed (-49) [ 620.208216][ T31] Bluetooth: hci0: command 0x1001 tx timeout [ 620.214520][T14820] Bluetooth: hci0: sending frame failed (-49) [ 622.288186][ T31] Bluetooth: hci0: command 0x1009 tx timeout 13:59:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x3800}}], 0xc6, 0x0) 13:59:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:15 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:59:15 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 626.789150][T12349] Bluetooth: hci0: Frame reassembly failed (-84) [ 626.809764][T15030] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 13:59:16 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:17 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 628.849055][ T31] Bluetooth: hci0: command 0x1003 tx timeout [ 628.855536][T14820] Bluetooth: hci0: sending frame failed (-49) [ 630.928302][ T31] Bluetooth: hci0: command 0x1001 tx timeout [ 630.934527][T14820] Bluetooth: hci0: sending frame failed (-49) [ 633.008176][ T31] Bluetooth: hci0: command 0x1009 tx timeout 13:59:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:26 executing program 2: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:26 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:26 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x1f40) 13:59:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0x0) 13:59:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="4227f9955517c96052ec15a97523ec34e5dd16c9b2174b", 0x17}, {0x0}, {&(0x7f0000000280)}], 0x3, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002d1b) ioctl$LOOP_CLR_FD(r0, 0x4c01) 13:59:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:27 executing program 2: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:27 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:27 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 13:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) writev(r0, &(0x7f0000002500)=[{&(0x7f0000000440)="704394f80b1ff7a3557bd12af9977a43cb7149e20aa467cf3a437fc9299a7e7236d2cb61babe08b08960a7e7d97c0c017f85b6f2ecd2424925130f5adc752ef68aed448d91b24a02819734504f861a9ebb18e374b360456407ab586411c01c5f6fd30a52f1026817b7fee7f68755f7fe8fc50c7886815108b1a3f5421ac1f0b53ed8c6000d6093275fa5a8fdabf16bc35276172f36d4be473611125160fd0840e03fd8596554a24743bc068bfe29c59e5e1b53b32683122137c8269677ae979abff900bc9f43dce2c8ceb46a1c864636598cd18acf137fecd0eb2c9755b9f505f0ce8bed87ac9c37d7398b028a645c5f81be8a134491abbadac6300011c3c9f3dfb234f83a655a8a20f2b96569c507f09448afb2448e907179cb389ba4cc26547c71b2332b6b89a16cf336062c24c19cfe02becc443a17318cccce39b3b296254c232d2ab7d8067c804127a2a5bd5b5805ba15123cb55e324f56134ca87c28115cebd6eb79d0a5c632cb3016eafd68f8676675508b5b70e7a247df2e2fb21fc3049ba636574b4d3a721617d883e970ec5ddfcba6d8e1c0cb28e1393f6bfa69dcaa539bd362e08aec9d8a06e03d11fc30369aa626eb9ff6c81c6f15708c4eb3c1c1d475f0ea30c23cf96e1b04584a47a95329537be8deaaa4691cad8ff7c3dde4d5e03a6baeada7c8e523660f7ba056d202cd6f4f1fff7a85480bcf18ceee3e9d1d8becc198dd64ada64e704e52857f405638b1bb60ffa5c1399a27fd6e2a8fe18df26174f6bad5459806ea1fa416fccb566bfaa3100b50ad83ac684d0d7d659ccc02b0936c884f62ff406c26011f0e3712904f210240c232ef4f626c56f8ddcb9c99b320313358b3ae21800de322bff382a6cee18fe1a0df0ab19559b168709fca33c82f0e940cf947492fb9aa3bb49e49ba8d93099a95734e8171f34eb1e0fad9a26c5d5822e442625d3289c5869924f48ec74e34a8449298f5ee18a159706c0341ed972953b6aec603659cc6834d4286ce4dfb723b3973e0efb135c6490086821a2960db7b050a4a111a598162872f5bed0f713f6df5ddd9f775c60c83e13612da27d5a4c246be414f97ce41948d9cb9703e1345abfe9b75cce4e7fdea1f3e3957f551ff3de26e90ed054484b560e96e5f7d318876a6a530c49e40d89a1ced9ae259824fac4227e60eaef3b26adde65a5716f42418432a2830417deacb12eeea468989865ccbe225a9b4cc325ee971144c4cf7afc2a5d17ee7bc24d90a773b6535d9f94c19820cd341b7c27e72056ea189ff0c6926c698c61683e26b416101c276e5456b0f1716b5752417b1aa0ae5b5efb4a912b655349876a9da05ee98f610cb7a411fd96e775dc80bd8160952d8d3799279f2993b59f5a632954ee54651dd2c04a547c076ab8af7c8341f36355d654dc002429c462deb83508554eb3e3282f6c07251ca5a9268dfd8b3d809b318d1b80112759a8a632d57c0231df5554e702e61294408e7f80a90d13d32449372678dd2dd2faae24b8b3d7dfc08619a36c9a8ca2bdf303e8cc997d319e02f6c1ebb0a327881ca328b33b6277de1f008fa724718afd288c5e978997f9402690c69279c02e9892c1e047d4ca722f6c13f776476c042b284083dd86806613bd6d5cea760d8ea049dc605b83b8fc53fe30fd271521c6c95b988c6d9323d85027a7873921197e7862e42076518e27b0f8e75a67e680fe6dd6b6a035519838cfcc5e21b9cdead0a22bfb97929f322bc4186a91d0b9ba8a10dff9382a2245fdcd10384900c6bbf0d40dd34c42dfceb16e6ff310fffd2ab182527dfa98a1d0d160ced0f33c14a45f41a965cf28756f8790c4876b75abf4f2a662b49516693f387a66a38db1dbd2ad4647d7cc8e8bbc6978632cb158c91eeae5834b42c5da596fe5f8f91f523d91a0999d50e17843e5de09cc2667ef9e3dfd63ac88874dbca8469116e8cc16bb15b5e5ad1243bb65d807c7e22a846c11ded01276b9aaef183912bd857abadd6e1a749b8592a380276a8defb57c370b000e3279747c5ac14672e412f1dca6a2988474085d8e4b1f61baf2750156962b91b9a1e44511167b01ae414d9f9008af2ca60bfa9823de8eb113e5c977401485076d8fa23a4cc8dbae1b5a02f47f54aa60ba812c7d39859992607ca1d32044706f1b02b1d57f3e93952139dc0f0e4e6feb47bbdcf7a5b781f33f81304a4e320ff3b8b64ce890db9ba932f0e835f204930ec3842c3a1853ff79928426decbc150721637295da2906c0b0f0e5cebc9030634d94314a9f62a0b0ad2aeae99dc113ece44c6bd3f36776f75cf135ea50db3836faf55471c52bb6cb9ceda15e66bdfdf0ccda9f6642ca2ecc879bb3c1129410d393fa1cac09b725eb6e80998d728e7556a10d8679f7e6f3cfd58f890e68757f7ae37965f1c9d3f8633be4103237173cb2413719c94bc25c4a75afb2915c7e91ffbb05234a63558fb4583ddbd619706500b30d1343b1c01651f17279336c42a8a82860dd97eaaa85c84aa6f5843f19679dc2773dcc5099728bd6ab0a4596a596589ed936595f5f59011bce232b3697634f0e9b5829397eb091a3c0f5d8e6bf80ffad45ad24880236addd5071952c7c2ce4d98d4541562428645675f945f27dc881c72fa34fc99e5703acc7d6e5ffcb90030e66b9582a49edbebec437d8f9d1825d31d966022fe5efcdefd6fe7e600836f786255c80bb169249be23930c9641daba1ba13f1de20bb2ea921f22e68c2821a2c2425351603614ca826ddf281e67b14f70aaa65c880f6a322db62c4c74e76f6259b9b42e7a3dafc3e8a4f57fbef983ee0da092eaed8678bacbf22ed43aa33faeecbd2c8fe51147124583153281c747", 0x7f0}, {&(0x7f0000000100)="31fcf235feffd47f1bbedf6f8e77bee310", 0x11}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$inet(0xffffffffffffffff, &(0x7f00000002c0)=""/169, 0xa9, 0x0, &(0x7f0000000380)={0x2, 0x4e20, @dev}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000002) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 13:59:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:27 executing program 2: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:28 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:28 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047ad, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:59:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:29 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 13:59:29 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:29 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4020aeb2, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}]}) 13:59:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:29 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(0x0, 0x1031fe, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) openat(0xffffffffffffff9c, 0x0, 0x133040, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 13:59:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:30 executing program 1: close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x187, 0x0) 13:59:30 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:30 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080), 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:30 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 13:59:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) [ 641.925323][T15159] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 641.933953][T10863] Bluetooth: hci0: Frame reassembly failed (-84) 13:59:31 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:31 executing program 4: 13:59:31 executing program 1: close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x187, 0x0) 13:59:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:31 executing program 4: 13:59:32 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:32 executing program 1: close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x187, 0x0) 13:59:32 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = ioctl$NS_GET_PARENT(r0, 0x541b, 0x73b000) ioctl$TUNGETDEVNETNS(r1, 0x5450, 0x0) 13:59:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:33 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 644.023703][ T31] Bluetooth: hci0: command 0x1003 tx timeout [ 644.030294][T14820] Bluetooth: hci0: sending frame failed (-49) 13:59:33 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 646.048970][ T31] Bluetooth: hci0: command 0x1001 tx timeout [ 646.055293][T14820] Bluetooth: hci0: sending frame failed (-49) [ 648.128212][ T31] Bluetooth: hci0: command 0x1009 tx timeout 13:59:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x207}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 13:59:41 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:41 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x8) 13:59:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:41 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 13:59:42 executing program 4: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a543) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0) [ 653.129794][T15228] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 653.159388][T12263] Bluetooth: hci0: Frame reassembly failed (-84) 13:59:43 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) [ 654.822560][T15233] not chained 20000 origins [ 654.827103][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 654.827950][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.827950][T15233] Call Trace: [ 654.827950][T15233] dump_stack+0x1df/0x240 [ 654.827950][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 654.827950][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 654.859604][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 654.859604][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 654.859604][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 654.859604][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 654.859604][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 654.859604][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 654.859604][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 654.859604][T15233] ? _copy_from_user+0x15b/0x260 [ 654.859604][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 654.859604][T15233] __msan_chain_origin+0x50/0x90 [ 654.859604][T15233] __get_compat_msghdr+0x5be/0x890 [ 654.859604][T15233] get_compat_msghdr+0x108/0x270 [ 654.859604][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 654.859604][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 654.859604][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 654.859604][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 654.859604][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 654.859604][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 654.859604][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 654.859604][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 654.859604][T15233] __sys_recvmmsg+0x4ca/0x510 [ 654.859604][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 654.859604][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 654.859604][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 654.859604][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 654.859604][T15233] do_fast_syscall_32+0x6b/0xd0 [ 654.859604][T15233] do_SYSENTER_32+0x73/0x90 [ 654.859604][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] RIP: 0023:0xf7f39549 [ 655.008089][T15233] Code: Bad RIP value. [ 655.008089][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 655.008089][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 655.008089][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.008089][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.008089][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 655.008089][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.008089][T15233] Uninit was stored to memory at: [ 655.008089][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 655.008089][T15233] __msan_chain_origin+0x50/0x90 [ 655.008089][T15233] __get_compat_msghdr+0x5be/0x890 [ 655.008089][T15233] get_compat_msghdr+0x108/0x270 [ 655.008089][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 655.008089][T15233] __sys_recvmmsg+0x4ca/0x510 [ 655.008089][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 655.008089][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 655.008089][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 655.008089][T15233] do_fast_syscall_32+0x6b/0xd0 [ 655.008089][T15233] do_SYSENTER_32+0x73/0x90 [ 655.008089][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] [ 655.008089][T15233] Uninit was stored to memory at: [ 655.008089][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 655.008089][T15233] __msan_chain_origin+0x50/0x90 [ 655.008089][T15233] __get_compat_msghdr+0x5be/0x890 [ 655.008089][T15233] get_compat_msghdr+0x108/0x270 [ 655.008089][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 655.008089][T15233] __sys_recvmmsg+0x4ca/0x510 [ 655.008089][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 655.008089][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 655.008089][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 655.008089][T15233] do_fast_syscall_32+0x6b/0xd0 [ 655.008089][T15233] do_SYSENTER_32+0x73/0x90 [ 655.008089][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] [ 655.008089][T15233] Uninit was stored to memory at: [ 655.008089][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 655.008089][T15233] __msan_chain_origin+0x50/0x90 [ 655.008089][T15233] __get_compat_msghdr+0x5be/0x890 [ 655.008089][T15233] get_compat_msghdr+0x108/0x270 [ 655.008089][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 655.008089][T15233] __sys_recvmmsg+0x4ca/0x510 [ 655.008089][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 655.008089][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 655.008089][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 655.008089][T15233] do_fast_syscall_32+0x6b/0xd0 [ 655.008089][T15233] do_SYSENTER_32+0x73/0x90 [ 655.008089][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] [ 655.008089][T15233] Uninit was stored to memory at: [ 655.008089][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 655.008089][T15233] __msan_chain_origin+0x50/0x90 [ 655.008089][T15233] __get_compat_msghdr+0x5be/0x890 [ 655.008089][T15233] get_compat_msghdr+0x108/0x270 [ 655.008089][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 655.008089][T15233] __sys_recvmmsg+0x4ca/0x510 [ 655.008089][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 655.008089][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 655.008089][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 655.008089][T15233] do_fast_syscall_32+0x6b/0xd0 [ 655.008089][T15233] do_SYSENTER_32+0x73/0x90 [ 655.008089][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] [ 655.008089][T15233] Uninit was stored to memory at: [ 655.008089][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 655.008089][T15233] __msan_chain_origin+0x50/0x90 [ 655.008089][T15233] __get_compat_msghdr+0x5be/0x890 [ 655.008089][T15233] get_compat_msghdr+0x108/0x270 [ 655.008089][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 655.008089][T15233] __sys_recvmmsg+0x4ca/0x510 [ 655.008089][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 655.008089][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 655.008089][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 655.008089][T15233] do_fast_syscall_32+0x6b/0xd0 [ 655.008089][T15233] do_SYSENTER_32+0x73/0x90 [ 655.008089][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] [ 655.008089][T15233] Uninit was stored to memory at: [ 655.008089][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 655.008089][T15233] __msan_chain_origin+0x50/0x90 [ 655.008089][T15233] __get_compat_msghdr+0x5be/0x890 [ 655.008089][T15233] get_compat_msghdr+0x108/0x270 [ 655.008089][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 655.008089][T15233] __sys_recvmmsg+0x4ca/0x510 [ 655.008089][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 655.008089][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 655.008089][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 655.008089][T15233] do_fast_syscall_32+0x6b/0xd0 [ 655.008089][T15233] do_SYSENTER_32+0x73/0x90 [ 655.008089][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] [ 655.008089][T15233] Uninit was stored to memory at: [ 655.008089][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 655.008089][T15233] __msan_chain_origin+0x50/0x90 [ 655.008089][T15233] __get_compat_msghdr+0x5be/0x890 [ 655.008089][T15233] get_compat_msghdr+0x108/0x270 [ 655.008089][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 655.008089][T15233] __sys_recvmmsg+0x4ca/0x510 [ 655.008089][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 655.008089][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 655.008089][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 655.008089][T15233] do_fast_syscall_32+0x6b/0xd0 [ 655.008089][T15233] do_SYSENTER_32+0x73/0x90 [ 655.008089][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 655.008089][T15233] [ 655.008089][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 655.008089][T15233] do_recvmmsg+0xc5/0x1ee0 13:59:44 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 655.008089][T15233] do_recvmmsg+0xc5/0x1ee0 [ 655.585357][T10545] Bluetooth: hci0: command 0x1003 tx timeout [ 655.591816][T14820] Bluetooth: hci0: sending frame failed (-49) 13:59:44 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 657.648411][T10545] Bluetooth: hci0: command 0x1001 tx timeout [ 657.654717][T14820] Bluetooth: hci0: sending frame failed (-49) [ 657.768838][T15233] not chained 30000 origins [ 657.773374][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 657.777950][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.777950][T15233] Call Trace: [ 657.777950][T15233] dump_stack+0x1df/0x240 [ 657.777950][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 657.777950][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 657.777950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 657.777950][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 657.777950][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 657.777950][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 657.777950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 657.777950][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 657.777950][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 657.777950][T15233] ? _copy_from_user+0x15b/0x260 [ 657.777950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 657.777950][T15233] __msan_chain_origin+0x50/0x90 [ 657.777950][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 657.864741][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 657.864741][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 657.864741][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 657.864741][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 657.864741][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 657.864741][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] RIP: 0023:0xf7f39549 [ 657.864741][T15233] Code: Bad RIP value. [ 657.864741][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 657.864741][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 657.864741][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.864741][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.864741][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 657.864741][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.864741][T15233] Uninit was stored to memory at: [ 657.864741][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 657.864741][T15233] __msan_chain_origin+0x50/0x90 [ 657.864741][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] [ 657.864741][T15233] Uninit was stored to memory at: [ 657.864741][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 657.864741][T15233] __msan_chain_origin+0x50/0x90 [ 657.864741][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] [ 657.864741][T15233] Uninit was stored to memory at: [ 657.864741][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 657.864741][T15233] __msan_chain_origin+0x50/0x90 [ 657.864741][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] [ 657.864741][T15233] Uninit was stored to memory at: [ 657.864741][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 657.864741][T15233] __msan_chain_origin+0x50/0x90 [ 657.864741][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] [ 657.864741][T15233] Uninit was stored to memory at: [ 657.864741][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 657.864741][T15233] __msan_chain_origin+0x50/0x90 [ 657.864741][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] [ 657.864741][T15233] Uninit was stored to memory at: [ 657.864741][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 657.864741][T15233] __msan_chain_origin+0x50/0x90 [ 657.864741][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] [ 657.864741][T15233] Uninit was stored to memory at: [ 657.864741][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 657.864741][T15233] __msan_chain_origin+0x50/0x90 [ 657.864741][T15233] __get_compat_msghdr+0x5be/0x890 [ 657.864741][T15233] get_compat_msghdr+0x108/0x270 [ 657.864741][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 657.864741][T15233] __sys_recvmmsg+0x4ca/0x510 [ 657.864741][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 657.864741][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 657.864741][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 657.864741][T15233] do_fast_syscall_32+0x6b/0xd0 [ 657.864741][T15233] do_SYSENTER_32+0x73/0x90 [ 657.864741][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 657.864741][T15233] [ 657.864741][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 657.864741][T15233] do_recvmmsg+0xc5/0x1ee0 [ 657.864741][T15233] do_recvmmsg+0xc5/0x1ee0 [ 659.025280][T15233] not chained 40000 origins [ 659.027973][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 659.027973][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.027973][T15233] Call Trace: [ 659.027973][T15233] dump_stack+0x1df/0x240 [ 659.027973][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 659.027973][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 659.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 659.027973][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 659.027973][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 659.027973][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 659.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 659.027973][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 659.027973][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 659.027973][T15233] ? _copy_from_user+0x15b/0x260 [ 659.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 659.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 659.027973][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 659.027973][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 659.027973][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 659.027973][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 659.027973][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] RIP: 0023:0xf7f39549 [ 659.027973][T15233] Code: Bad RIP value. [ 659.027973][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 659.027973][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 659.027973][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.027973][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.027973][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 659.027973][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.027973][T15233] Uninit was stored to memory at: [ 659.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] [ 659.027973][T15233] Uninit was stored to memory at: [ 659.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] [ 659.027973][T15233] Uninit was stored to memory at: [ 659.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] [ 659.027973][T15233] Uninit was stored to memory at: [ 659.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] [ 659.027973][T15233] Uninit was stored to memory at: [ 659.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] [ 659.027973][T15233] Uninit was stored to memory at: [ 659.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] [ 659.027973][T15233] Uninit was stored to memory at: [ 659.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 659.027973][T15233] __msan_chain_origin+0x50/0x90 [ 659.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 659.027973][T15233] get_compat_msghdr+0x108/0x270 [ 659.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 659.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 659.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 659.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 659.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 659.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 659.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 659.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 659.027973][T15233] [ 659.027973][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 659.027973][T15233] do_recvmmsg+0xc5/0x1ee0 [ 659.027973][T15233] do_recvmmsg+0xc5/0x1ee0 [ 659.798453][T10545] Bluetooth: hci0: command 0x1009 tx timeout [ 660.216692][T15233] not chained 50000 origins [ 660.217972][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 660.217972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.217972][T15233] Call Trace: [ 660.217972][T15233] dump_stack+0x1df/0x240 [ 660.217972][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 660.217972][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 660.217972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 660.217972][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 660.217972][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 660.217972][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 660.217972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 660.217972][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 660.217972][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 660.217972][T15233] ? _copy_from_user+0x15b/0x260 [ 660.217972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 660.217972][T15233] __msan_chain_origin+0x50/0x90 [ 660.217972][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.217972][T15233] get_compat_msghdr+0x108/0x270 [ 660.217972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.217972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 660.217972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 660.217972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 660.217972][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 660.217972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 660.217972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 660.217972][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 660.217972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] RIP: 0023:0xf7f39549 [ 660.368139][T15233] Code: Bad RIP value. [ 660.368139][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 660.368139][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 660.368139][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.368139][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.368139][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 660.368139][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.368139][T15233] Uninit was stored to memory at: [ 660.368139][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 660.368139][T15233] __msan_chain_origin+0x50/0x90 [ 660.368139][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.368139][T15233] get_compat_msghdr+0x108/0x270 [ 660.368139][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.368139][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] [ 660.368139][T15233] Uninit was stored to memory at: [ 660.368139][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 660.368139][T15233] __msan_chain_origin+0x50/0x90 [ 660.368139][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.368139][T15233] get_compat_msghdr+0x108/0x270 [ 660.368139][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.368139][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] [ 660.368139][T15233] Uninit was stored to memory at: [ 660.368139][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 660.368139][T15233] __msan_chain_origin+0x50/0x90 [ 660.368139][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.368139][T15233] get_compat_msghdr+0x108/0x270 [ 660.368139][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.368139][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] [ 660.368139][T15233] Uninit was stored to memory at: [ 660.368139][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 660.368139][T15233] __msan_chain_origin+0x50/0x90 [ 660.368139][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.368139][T15233] get_compat_msghdr+0x108/0x270 [ 660.368139][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.368139][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] [ 660.368139][T15233] Uninit was stored to memory at: [ 660.368139][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 660.368139][T15233] __msan_chain_origin+0x50/0x90 [ 660.368139][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.368139][T15233] get_compat_msghdr+0x108/0x270 [ 660.368139][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.368139][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] [ 660.368139][T15233] Uninit was stored to memory at: [ 660.368139][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 660.368139][T15233] __msan_chain_origin+0x50/0x90 [ 660.368139][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.368139][T15233] get_compat_msghdr+0x108/0x270 [ 660.368139][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.368139][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] [ 660.368139][T15233] Uninit was stored to memory at: [ 660.368139][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 660.368139][T15233] __msan_chain_origin+0x50/0x90 [ 660.368139][T15233] __get_compat_msghdr+0x5be/0x890 [ 660.368139][T15233] get_compat_msghdr+0x108/0x270 [ 660.368139][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 660.368139][T15233] __sys_recvmmsg+0x4ca/0x510 [ 660.368139][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 660.368139][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 660.368139][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 660.368139][T15233] do_fast_syscall_32+0x6b/0xd0 [ 660.368139][T15233] do_SYSENTER_32+0x73/0x90 [ 660.368139][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 660.368139][T15233] [ 660.368139][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 660.368139][T15233] do_recvmmsg+0xc5/0x1ee0 [ 660.368139][T15233] do_recvmmsg+0xc5/0x1ee0 [ 661.155921][T15233] not chained 60000 origins [ 661.157970][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 661.157970][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.157970][T15233] Call Trace: [ 661.157970][T15233] dump_stack+0x1df/0x240 [ 661.157970][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 661.157970][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 661.157970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 661.157970][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 661.157970][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 661.157970][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 661.157970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 661.157970][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 661.157970][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 661.157970][T15233] ? _copy_from_user+0x15b/0x260 [ 661.157970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 661.157970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 661.157970][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 661.157970][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 661.157970][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 661.157970][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 661.157970][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] RIP: 0023:0xf7f39549 [ 661.157970][T15233] Code: Bad RIP value. [ 661.157970][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 661.157970][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 661.157970][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.157970][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.157970][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 661.157970][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.157970][T15233] Uninit was stored to memory at: [ 661.157970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] [ 661.157970][T15233] Uninit was stored to memory at: [ 661.157970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] [ 661.157970][T15233] Uninit was stored to memory at: [ 661.157970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] [ 661.157970][T15233] Uninit was stored to memory at: [ 661.157970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] [ 661.157970][T15233] Uninit was stored to memory at: [ 661.157970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] [ 661.157970][T15233] Uninit was stored to memory at: [ 661.157970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] [ 661.157970][T15233] Uninit was stored to memory at: [ 661.157970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 661.157970][T15233] __msan_chain_origin+0x50/0x90 [ 661.157970][T15233] __get_compat_msghdr+0x5be/0x890 [ 661.157970][T15233] get_compat_msghdr+0x108/0x270 [ 661.157970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 661.157970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 661.157970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 661.157970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 661.157970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 661.157970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 661.157970][T15233] do_SYSENTER_32+0x73/0x90 [ 661.157970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 661.157970][T15233] [ 661.157970][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 661.157970][T15233] do_recvmmsg+0xc5/0x1ee0 [ 661.157970][T15233] do_recvmmsg+0xc5/0x1ee0 [ 662.108222][T15233] not chained 70000 origins [ 662.113073][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 662.117982][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.128053][T15233] Call Trace: [ 662.128053][T15233] dump_stack+0x1df/0x240 [ 662.128053][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 662.128053][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 662.128053][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 662.128053][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 662.128053][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 662.128053][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 662.128053][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 662.128053][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 662.128053][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 662.128053][T15233] ? _copy_from_user+0x15b/0x260 [ 662.128053][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 662.128053][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 662.128053][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 662.128053][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 662.128053][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 662.128053][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 662.128053][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] RIP: 0023:0xf7f39549 [ 662.128053][T15233] Code: Bad RIP value. [ 662.128053][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 662.128053][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 662.128053][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.128053][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.128053][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 662.128053][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.128053][T15233] Uninit was stored to memory at: [ 662.128053][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] [ 662.128053][T15233] Uninit was stored to memory at: [ 662.128053][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] [ 662.128053][T15233] Uninit was stored to memory at: [ 662.128053][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] [ 662.128053][T15233] Uninit was stored to memory at: [ 662.128053][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] [ 662.128053][T15233] Uninit was stored to memory at: [ 662.128053][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] [ 662.128053][T15233] Uninit was stored to memory at: [ 662.128053][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] [ 662.128053][T15233] Uninit was stored to memory at: [ 662.128053][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 662.128053][T15233] __msan_chain_origin+0x50/0x90 [ 662.128053][T15233] __get_compat_msghdr+0x5be/0x890 [ 662.128053][T15233] get_compat_msghdr+0x108/0x270 [ 662.128053][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 662.128053][T15233] __sys_recvmmsg+0x4ca/0x510 [ 662.128053][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 662.128053][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 662.128053][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 662.128053][T15233] do_fast_syscall_32+0x6b/0xd0 [ 662.128053][T15233] do_SYSENTER_32+0x73/0x90 [ 662.128053][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 662.128053][T15233] [ 662.128053][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 662.128053][T15233] do_recvmmsg+0xc5/0x1ee0 [ 662.128053][T15233] do_recvmmsg+0xc5/0x1ee0 [ 663.053032][T15233] not chained 80000 origins [ 663.057835][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 663.057996][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.057996][T15233] Call Trace: [ 663.057996][T15233] dump_stack+0x1df/0x240 [ 663.057996][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 663.057996][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 663.057996][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 663.057996][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 663.057996][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 663.057996][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 663.057996][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 663.057996][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 663.057996][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 663.057996][T15233] ? _copy_from_user+0x15b/0x260 [ 663.057996][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 663.057996][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 663.057996][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 663.057996][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 663.057996][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 663.057996][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 663.057996][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] RIP: 0023:0xf7f39549 [ 663.057996][T15233] Code: Bad RIP value. [ 663.057996][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 663.057996][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 663.057996][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.057996][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.057996][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 663.057996][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.057996][T15233] Uninit was stored to memory at: [ 663.057996][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] [ 663.057996][T15233] Uninit was stored to memory at: [ 663.057996][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] [ 663.057996][T15233] Uninit was stored to memory at: [ 663.057996][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] [ 663.057996][T15233] Uninit was stored to memory at: [ 663.057996][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] [ 663.057996][T15233] Uninit was stored to memory at: [ 663.057996][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] [ 663.057996][T15233] Uninit was stored to memory at: [ 663.057996][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] [ 663.057996][T15233] Uninit was stored to memory at: [ 663.057996][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 663.057996][T15233] __msan_chain_origin+0x50/0x90 [ 663.057996][T15233] __get_compat_msghdr+0x5be/0x890 [ 663.057996][T15233] get_compat_msghdr+0x108/0x270 [ 663.057996][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 663.057996][T15233] __sys_recvmmsg+0x4ca/0x510 [ 663.057996][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 663.057996][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 663.057996][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 663.057996][T15233] do_fast_syscall_32+0x6b/0xd0 [ 663.057996][T15233] do_SYSENTER_32+0x73/0x90 [ 663.057996][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 663.057996][T15233] [ 663.057996][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 663.057996][T15233] do_recvmmsg+0xc5/0x1ee0 [ 663.057996][T15233] do_recvmmsg+0xc5/0x1ee0 13:59:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 13:59:53 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 13:59:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:59:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0cfdff", 0x24, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 13:59:53 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x8) [ 664.285465][T15267] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:59:53 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) [ 664.447385][T15272] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 664.486644][T15267] syz-executor.3 (15267) used greatest stack depth: 3304 bytes left [ 664.537488][T12263] Bluetooth: hci0: Frame reassembly failed (-84) [ 664.545357][T12263] Bluetooth: hci0: Frame reassembly failed (-84) [ 664.780020][T15273] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 665.197192][T15233] not chained 90000 origins [ 665.198030][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 665.198030][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.198030][T15233] Call Trace: [ 665.198030][T15233] dump_stack+0x1df/0x240 [ 665.198030][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 665.198030][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 665.198030][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 665.198030][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 665.248125][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 665.248125][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 665.248125][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 665.248125][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 665.248125][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 665.248125][T15233] ? _copy_from_user+0x15b/0x260 [ 665.248125][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 665.248125][T15233] __msan_chain_origin+0x50/0x90 [ 665.248125][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.248125][T15233] get_compat_msghdr+0x108/0x270 [ 665.299550][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.299550][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 665.299550][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 665.318201][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 665.318201][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 665.328533][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 665.328533][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 665.328533][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 665.328533][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.328533][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.328533][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 665.328533][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.328533][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.328533][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.328533][T15233] do_SYSENTER_32+0x73/0x90 [ 665.328533][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.328533][T15233] RIP: 0023:0xf7f39549 [ 665.328533][T15233] Code: Bad RIP value. [ 665.328533][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 665.328533][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 665.328533][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.328533][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.328533][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 665.328533][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.328533][T15233] Uninit was stored to memory at: [ 665.328533][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 665.328533][T15233] __msan_chain_origin+0x50/0x90 [ 665.328533][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.328533][T15233] get_compat_msghdr+0x108/0x270 [ 665.328533][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.328533][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.328533][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.488239][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.488239][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.488239][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.488239][T15233] do_SYSENTER_32+0x73/0x90 [ 665.488239][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.488239][T15233] [ 665.488239][T15233] Uninit was stored to memory at: [ 665.488239][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 665.488239][T15233] __msan_chain_origin+0x50/0x90 [ 665.488239][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.488239][T15233] get_compat_msghdr+0x108/0x270 [ 665.488239][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.488239][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.488239][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.488239][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.564222][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.564222][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.564222][T15233] do_SYSENTER_32+0x73/0x90 [ 665.564222][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.564222][T15233] [ 665.564222][T15233] Uninit was stored to memory at: [ 665.564222][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 665.564222][T15233] __msan_chain_origin+0x50/0x90 [ 665.564222][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.564222][T15233] get_compat_msghdr+0x108/0x270 [ 665.564222][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.564222][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.564222][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.564222][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.564222][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.564222][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.564222][T15233] do_SYSENTER_32+0x73/0x90 [ 665.564222][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.564222][T15233] [ 665.564222][T15233] Uninit was stored to memory at: [ 665.564222][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 665.564222][T15233] __msan_chain_origin+0x50/0x90 [ 665.564222][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.564222][T15233] get_compat_msghdr+0x108/0x270 [ 665.564222][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.564222][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.564222][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.564222][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.564222][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.564222][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.564222][T15233] do_SYSENTER_32+0x73/0x90 [ 665.564222][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.564222][T15233] [ 665.564222][T15233] Uninit was stored to memory at: [ 665.564222][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 665.564222][T15233] __msan_chain_origin+0x50/0x90 [ 665.564222][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.564222][T15233] get_compat_msghdr+0x108/0x270 [ 665.564222][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.564222][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.564222][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.564222][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.564222][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.564222][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.564222][T15233] do_SYSENTER_32+0x73/0x90 [ 665.564222][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.564222][T15233] [ 665.564222][T15233] Uninit was stored to memory at: [ 665.564222][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 665.564222][T15233] __msan_chain_origin+0x50/0x90 [ 665.564222][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.564222][T15233] get_compat_msghdr+0x108/0x270 [ 665.564222][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.564222][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.564222][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.564222][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.564222][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.564222][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.564222][T15233] do_SYSENTER_32+0x73/0x90 [ 665.564222][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.564222][T15233] [ 665.564222][T15233] Uninit was stored to memory at: [ 665.564222][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 665.564222][T15233] __msan_chain_origin+0x50/0x90 [ 665.564222][T15233] __get_compat_msghdr+0x5be/0x890 [ 665.564222][T15233] get_compat_msghdr+0x108/0x270 [ 665.564222][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 665.564222][T15233] __sys_recvmmsg+0x4ca/0x510 [ 665.564222][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 665.564222][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 665.564222][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 665.564222][T15233] do_fast_syscall_32+0x6b/0xd0 [ 665.564222][T15233] do_SYSENTER_32+0x73/0x90 [ 665.564222][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 665.564222][T15233] [ 665.564222][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 665.564222][T15233] do_recvmmsg+0xc5/0x1ee0 [ 665.564222][T15233] do_recvmmsg+0xc5/0x1ee0 [ 666.608309][T10545] Bluetooth: hci0: command 0x1003 tx timeout [ 666.614972][T14820] Bluetooth: hci0: sending frame failed (-49) [ 666.639603][T15233] not chained 100000 origins [ 666.644243][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 666.647957][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.647957][T15233] Call Trace: [ 666.647957][T15233] dump_stack+0x1df/0x240 [ 666.647957][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 666.647957][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 666.647957][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 666.647957][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.647957][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 666.647957][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 666.647957][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 666.647957][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 666.647957][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 666.647957][T15233] ? _copy_from_user+0x15b/0x260 [ 666.647957][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 666.647957][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 666.647957][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 666.647957][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 666.647957][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 666.647957][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 666.647957][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] RIP: 0023:0xf7f39549 [ 666.647957][T15233] Code: Bad RIP value. [ 666.647957][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 666.647957][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 666.647957][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.647957][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.647957][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 666.647957][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.647957][T15233] Uninit was stored to memory at: [ 666.647957][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] [ 666.647957][T15233] Uninit was stored to memory at: [ 666.647957][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] [ 666.647957][T15233] Uninit was stored to memory at: [ 666.647957][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] [ 666.647957][T15233] Uninit was stored to memory at: [ 666.647957][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] [ 666.647957][T15233] Uninit was stored to memory at: [ 666.647957][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] [ 666.647957][T15233] Uninit was stored to memory at: [ 666.647957][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] [ 666.647957][T15233] Uninit was stored to memory at: [ 666.647957][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 666.647957][T15233] __msan_chain_origin+0x50/0x90 [ 666.647957][T15233] __get_compat_msghdr+0x5be/0x890 [ 666.647957][T15233] get_compat_msghdr+0x108/0x270 [ 666.647957][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 666.647957][T15233] __sys_recvmmsg+0x4ca/0x510 [ 666.647957][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 666.647957][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 666.647957][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 666.647957][T15233] do_fast_syscall_32+0x6b/0xd0 [ 666.647957][T15233] do_SYSENTER_32+0x73/0x90 [ 666.647957][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 666.647957][T15233] [ 666.647957][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 666.647957][T15233] do_recvmmsg+0xc5/0x1ee0 [ 666.647957][T15233] do_recvmmsg+0xc5/0x1ee0 [ 667.822925][T15233] not chained 110000 origins [ 667.827565][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 667.827966][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.827966][T15233] Call Trace: [ 667.827966][T15233] dump_stack+0x1df/0x240 [ 667.827966][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 667.827966][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 667.827966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 667.827966][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 667.827966][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 667.827966][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 667.827966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 667.827966][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 667.827966][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 667.827966][T15233] ? _copy_from_user+0x15b/0x260 [ 667.827966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 667.827966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 667.827966][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 667.827966][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 667.827966][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 667.827966][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 667.827966][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] RIP: 0023:0xf7f39549 [ 667.827966][T15233] Code: Bad RIP value. [ 667.827966][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 667.827966][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 667.827966][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.827966][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.827966][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 667.827966][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.827966][T15233] Uninit was stored to memory at: [ 667.827966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] [ 667.827966][T15233] Uninit was stored to memory at: [ 667.827966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] [ 667.827966][T15233] Uninit was stored to memory at: [ 667.827966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] [ 667.827966][T15233] Uninit was stored to memory at: [ 667.827966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] [ 667.827966][T15233] Uninit was stored to memory at: [ 667.827966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] [ 667.827966][T15233] Uninit was stored to memory at: [ 667.827966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] [ 667.827966][T15233] Uninit was stored to memory at: [ 667.827966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 667.827966][T15233] __msan_chain_origin+0x50/0x90 [ 667.827966][T15233] __get_compat_msghdr+0x5be/0x890 [ 667.827966][T15233] get_compat_msghdr+0x108/0x270 [ 667.827966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 667.827966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 667.827966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 667.827966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 667.827966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 667.827966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 667.827966][T15233] do_SYSENTER_32+0x73/0x90 [ 667.827966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 667.827966][T15233] [ 667.827966][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 667.827966][T15233] do_recvmmsg+0xc5/0x1ee0 [ 667.827966][T15233] do_recvmmsg+0xc5/0x1ee0 [ 668.688691][T10545] Bluetooth: hci0: command 0x1001 tx timeout [ 668.695002][T14820] Bluetooth: hci0: sending frame failed (-49) [ 668.866473][T15233] not chained 120000 origins [ 668.867967][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 668.867967][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.867967][T15233] Call Trace: [ 668.867967][T15233] dump_stack+0x1df/0x240 [ 668.867967][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 668.867967][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 668.867967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 668.867967][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 668.867967][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 668.867967][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 668.867967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 668.867967][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 668.867967][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 668.867967][T15233] ? _copy_from_user+0x15b/0x260 [ 668.867967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 668.867967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 668.867967][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 668.867967][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 668.867967][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 668.867967][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 668.867967][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] RIP: 0023:0xf7f39549 [ 668.867967][T15233] Code: Bad RIP value. [ 668.867967][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 668.867967][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 668.867967][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.867967][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.867967][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 668.867967][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.867967][T15233] Uninit was stored to memory at: [ 668.867967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] [ 668.867967][T15233] Uninit was stored to memory at: [ 668.867967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] [ 668.867967][T15233] Uninit was stored to memory at: [ 668.867967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] [ 668.867967][T15233] Uninit was stored to memory at: [ 668.867967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] [ 668.867967][T15233] Uninit was stored to memory at: [ 668.867967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] [ 668.867967][T15233] Uninit was stored to memory at: [ 668.867967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] [ 668.867967][T15233] Uninit was stored to memory at: [ 668.867967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 668.867967][T15233] __msan_chain_origin+0x50/0x90 [ 668.867967][T15233] __get_compat_msghdr+0x5be/0x890 [ 668.867967][T15233] get_compat_msghdr+0x108/0x270 [ 668.867967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 668.867967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 668.867967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 668.867967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 668.867967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 668.867967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 668.867967][T15233] do_SYSENTER_32+0x73/0x90 [ 668.867967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.867967][T15233] [ 668.867967][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 668.867967][T15233] do_recvmmsg+0xc5/0x1ee0 [ 668.867967][T15233] do_recvmmsg+0xc5/0x1ee0 [ 669.922626][T15233] not chained 130000 origins [ 669.927247][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 669.927972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.927972][T15233] Call Trace: [ 669.927972][T15233] dump_stack+0x1df/0x240 [ 669.927972][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 669.927972][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 669.927972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 669.927972][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 669.927972][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 669.927972][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 669.927972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 669.927972][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 669.927972][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 669.927972][T15233] ? _copy_from_user+0x15b/0x260 [ 669.927972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 669.927972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 669.927972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 669.927972][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 669.927972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 669.927972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 669.927972][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] RIP: 0023:0xf7f39549 [ 669.927972][T15233] Code: Bad RIP value. [ 669.927972][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 669.927972][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 669.927972][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.927972][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.927972][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 669.927972][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.927972][T15233] Uninit was stored to memory at: [ 669.927972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] [ 669.927972][T15233] Uninit was stored to memory at: [ 669.927972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] [ 669.927972][T15233] Uninit was stored to memory at: [ 669.927972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] [ 669.927972][T15233] Uninit was stored to memory at: [ 669.927972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] [ 669.927972][T15233] Uninit was stored to memory at: [ 669.927972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] [ 669.927972][T15233] Uninit was stored to memory at: [ 669.927972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] [ 669.927972][T15233] Uninit was stored to memory at: [ 669.927972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 669.927972][T15233] __msan_chain_origin+0x50/0x90 [ 669.927972][T15233] __get_compat_msghdr+0x5be/0x890 [ 669.927972][T15233] get_compat_msghdr+0x108/0x270 [ 669.927972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 669.927972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 669.927972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 669.927972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 669.927972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 669.927972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 669.927972][T15233] do_SYSENTER_32+0x73/0x90 [ 669.927972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 669.927972][T15233] [ 669.927972][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 669.927972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 669.927972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 670.768695][T10545] Bluetooth: hci0: command 0x1009 tx timeout [ 670.990483][T15233] not chained 140000 origins [ 670.995107][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 670.997972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.997972][T15233] Call Trace: [ 670.997972][T15233] dump_stack+0x1df/0x240 [ 670.997972][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 670.997972][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 670.997972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 670.997972][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 670.997972][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 670.997972][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 670.997972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 670.997972][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 670.997972][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 670.997972][T15233] ? _copy_from_user+0x15b/0x260 [ 670.997972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 670.997972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 670.997972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 670.997972][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 670.997972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 670.997972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 670.997972][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] RIP: 0023:0xf7f39549 [ 670.997972][T15233] Code: Bad RIP value. [ 670.997972][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 670.997972][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 670.997972][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 670.997972][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 670.997972][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 670.997972][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 670.997972][T15233] Uninit was stored to memory at: [ 670.997972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] [ 670.997972][T15233] Uninit was stored to memory at: [ 670.997972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] [ 670.997972][T15233] Uninit was stored to memory at: [ 670.997972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] [ 670.997972][T15233] Uninit was stored to memory at: [ 670.997972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] [ 670.997972][T15233] Uninit was stored to memory at: [ 670.997972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] [ 670.997972][T15233] Uninit was stored to memory at: [ 670.997972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] [ 670.997972][T15233] Uninit was stored to memory at: [ 670.997972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 670.997972][T15233] __msan_chain_origin+0x50/0x90 [ 670.997972][T15233] __get_compat_msghdr+0x5be/0x890 [ 670.997972][T15233] get_compat_msghdr+0x108/0x270 [ 670.997972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 670.997972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 670.997972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 670.997972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 670.997972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 670.997972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 670.997972][T15233] do_SYSENTER_32+0x73/0x90 [ 670.997972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 670.997972][T15233] [ 670.997972][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 670.997972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 670.997972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 672.021415][T15233] not chained 150000 origins [ 672.026038][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 672.027973][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.027973][T15233] Call Trace: [ 672.027973][T15233] dump_stack+0x1df/0x240 [ 672.027973][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 672.027973][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 672.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 672.027973][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 672.027973][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 672.027973][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 672.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 672.027973][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 672.027973][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 672.027973][T15233] ? _copy_from_user+0x15b/0x260 [ 672.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 672.027973][T15233] __msan_chain_origin+0x50/0x90 [ 672.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.027973][T15233] get_compat_msghdr+0x108/0x270 [ 672.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.027973][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 672.027973][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 672.027973][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 672.027973][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 672.027973][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 672.027973][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 672.027973][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 672.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.027973][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 672.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 672.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.027973][T15233] RIP: 0023:0xf7f39549 [ 672.027973][T15233] Code: Bad RIP value. [ 672.027973][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 672.027973][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 672.027973][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.027973][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 672.027973][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 672.027973][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.027973][T15233] Uninit was stored to memory at: [ 672.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 672.027973][T15233] __msan_chain_origin+0x50/0x90 [ 672.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.027973][T15233] get_compat_msghdr+0x108/0x270 [ 672.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 672.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.027973][T15233] [ 672.027973][T15233] Uninit was stored to memory at: [ 672.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 672.027973][T15233] __msan_chain_origin+0x50/0x90 [ 672.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.027973][T15233] get_compat_msghdr+0x108/0x270 [ 672.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 672.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.027973][T15233] [ 672.027973][T15233] Uninit was stored to memory at: [ 672.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 672.027973][T15233] __msan_chain_origin+0x50/0x90 [ 672.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.027973][T15233] get_compat_msghdr+0x108/0x270 [ 672.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 672.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.027973][T15233] [ 672.027973][T15233] Uninit was stored to memory at: [ 672.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 672.027973][T15233] __msan_chain_origin+0x50/0x90 [ 672.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.027973][T15233] get_compat_msghdr+0x108/0x270 [ 672.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 672.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.027973][T15233] [ 672.027973][T15233] Uninit was stored to memory at: [ 672.027973][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 672.027973][T15233] __msan_chain_origin+0x50/0x90 [ 672.027973][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.027973][T15233] get_compat_msghdr+0x108/0x270 [ 672.027973][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.027973][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.027973][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.027973][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.027973][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.027973][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.027973][T15233] do_SYSENTER_32+0x73/0x90 [ 672.027973][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.617216][T15233] [ 672.617216][T15233] Uninit was stored to memory at: [ 672.617216][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 672.617216][T15233] __msan_chain_origin+0x50/0x90 [ 672.617216][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.617216][T15233] get_compat_msghdr+0x108/0x270 [ 672.617216][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.617216][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.617216][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.617216][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.617216][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.617216][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.617216][T15233] do_SYSENTER_32+0x73/0x90 [ 672.617216][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.617216][T15233] [ 672.617216][T15233] Uninit was stored to memory at: [ 672.617216][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 672.617216][T15233] __msan_chain_origin+0x50/0x90 [ 672.617216][T15233] __get_compat_msghdr+0x5be/0x890 [ 672.617216][T15233] get_compat_msghdr+0x108/0x270 [ 672.617216][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 672.617216][T15233] __sys_recvmmsg+0x4ca/0x510 [ 672.617216][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 672.617216][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 672.617216][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 672.617216][T15233] do_fast_syscall_32+0x6b/0xd0 [ 672.617216][T15233] do_SYSENTER_32+0x73/0x90 [ 672.617216][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 672.617216][T15233] [ 672.617216][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 672.617216][T15233] do_recvmmsg+0xc5/0x1ee0 [ 672.617216][T15233] do_recvmmsg+0xc5/0x1ee0 [ 673.065113][T15233] not chained 160000 origins [ 673.067952][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 673.067952][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.067952][T15233] Call Trace: [ 673.067952][T15233] dump_stack+0x1df/0x240 [ 673.067952][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 673.067952][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 673.067952][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 673.067952][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 673.067952][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 673.067952][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 673.067952][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 673.067952][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 673.067952][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 673.067952][T15233] ? _copy_from_user+0x15b/0x260 [ 673.067952][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 673.067952][T15233] __msan_chain_origin+0x50/0x90 [ 673.067952][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.067952][T15233] get_compat_msghdr+0x108/0x270 [ 673.067952][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.067952][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 673.067952][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 673.067952][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 673.067952][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 673.067952][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 673.067952][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 673.067952][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 673.067952][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.067952][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.067952][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 673.067952][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.067952][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.067952][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.067952][T15233] do_SYSENTER_32+0x73/0x90 [ 673.067952][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.067952][T15233] RIP: 0023:0xf7f39549 [ 673.067952][T15233] Code: Bad RIP value. [ 673.067952][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 673.067952][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 673.067952][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.067952][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.067952][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 673.067952][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.067952][T15233] Uninit was stored to memory at: [ 673.067952][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 673.067952][T15233] __msan_chain_origin+0x50/0x90 [ 673.067952][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.067952][T15233] get_compat_msghdr+0x108/0x270 [ 673.067952][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.067952][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.067952][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.067952][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.067952][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.067952][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.067952][T15233] do_SYSENTER_32+0x73/0x90 [ 673.067952][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.067952][T15233] [ 673.067952][T15233] Uninit was stored to memory at: [ 673.067952][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 673.067952][T15233] __msan_chain_origin+0x50/0x90 [ 673.067952][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.067952][T15233] get_compat_msghdr+0x108/0x270 [ 673.408563][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.408563][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.408563][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.408563][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.408563][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.408563][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.408563][T15233] do_SYSENTER_32+0x73/0x90 [ 673.408563][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.408563][T15233] [ 673.408563][T15233] Uninit was stored to memory at: [ 673.408563][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 673.408563][T15233] __msan_chain_origin+0x50/0x90 [ 673.408563][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.408563][T15233] get_compat_msghdr+0x108/0x270 [ 673.408563][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.408563][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.408563][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.408563][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.408563][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.408563][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.408563][T15233] do_SYSENTER_32+0x73/0x90 [ 673.408563][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.408563][T15233] [ 673.408563][T15233] Uninit was stored to memory at: [ 673.408563][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 673.408563][T15233] __msan_chain_origin+0x50/0x90 [ 673.408563][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.408563][T15233] get_compat_msghdr+0x108/0x270 [ 673.408563][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.408563][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.408563][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.408563][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.408563][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.408563][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.408563][T15233] do_SYSENTER_32+0x73/0x90 [ 673.408563][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.408563][T15233] [ 673.408563][T15233] Uninit was stored to memory at: [ 673.408563][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 673.408563][T15233] __msan_chain_origin+0x50/0x90 [ 673.408563][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.408563][T15233] get_compat_msghdr+0x108/0x270 [ 673.408563][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.408563][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.408563][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.408563][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.408563][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.408563][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.408563][T15233] do_SYSENTER_32+0x73/0x90 [ 673.408563][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.408563][T15233] [ 673.408563][T15233] Uninit was stored to memory at: [ 673.408563][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 673.408563][T15233] __msan_chain_origin+0x50/0x90 [ 673.408563][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.408563][T15233] get_compat_msghdr+0x108/0x270 [ 673.408563][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.408563][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.408563][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.408563][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.408563][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.408563][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.408563][T15233] do_SYSENTER_32+0x73/0x90 [ 673.408563][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.408563][T15233] [ 673.408563][T15233] Uninit was stored to memory at: [ 673.408563][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 673.408563][T15233] __msan_chain_origin+0x50/0x90 [ 673.408563][T15233] __get_compat_msghdr+0x5be/0x890 [ 673.408563][T15233] get_compat_msghdr+0x108/0x270 [ 673.408563][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 673.408563][T15233] __sys_recvmmsg+0x4ca/0x510 [ 673.408563][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 673.408563][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 673.408563][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 673.408563][T15233] do_fast_syscall_32+0x6b/0xd0 [ 673.408563][T15233] do_SYSENTER_32+0x73/0x90 [ 673.408563][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 673.408563][T15233] [ 673.408563][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 673.408563][T15233] do_recvmmsg+0xc5/0x1ee0 [ 673.408563][T15233] do_recvmmsg+0xc5/0x1ee0 [ 674.044607][T15233] not chained 170000 origins [ 674.048820][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 674.048820][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.048820][T15233] Call Trace: [ 674.048820][T15233] dump_stack+0x1df/0x240 [ 674.048820][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 674.048820][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 674.048820][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 674.048820][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 674.048820][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 674.048820][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 674.048820][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 674.048820][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 674.048820][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 674.048820][T15233] ? _copy_from_user+0x15b/0x260 [ 674.048820][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 674.048820][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 674.048820][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 674.048820][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 674.048820][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 674.048820][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 674.048820][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] RIP: 0023:0xf7f39549 [ 674.048820][T15233] Code: Bad RIP value. [ 674.048820][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 674.048820][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 674.048820][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.048820][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 674.048820][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 674.048820][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 674.048820][T15233] Uninit was stored to memory at: [ 674.048820][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] [ 674.048820][T15233] Uninit was stored to memory at: [ 674.048820][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] [ 674.048820][T15233] Uninit was stored to memory at: [ 674.048820][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] [ 674.048820][T15233] Uninit was stored to memory at: [ 674.048820][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] [ 674.048820][T15233] Uninit was stored to memory at: [ 674.048820][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] [ 674.048820][T15233] Uninit was stored to memory at: [ 674.048820][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] [ 674.048820][T15233] Uninit was stored to memory at: [ 674.048820][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 674.048820][T15233] __msan_chain_origin+0x50/0x90 [ 674.048820][T15233] __get_compat_msghdr+0x5be/0x890 [ 674.048820][T15233] get_compat_msghdr+0x108/0x270 [ 674.048820][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 674.048820][T15233] __sys_recvmmsg+0x4ca/0x510 [ 674.048820][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 674.048820][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 674.048820][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 674.048820][T15233] do_fast_syscall_32+0x6b/0xd0 [ 674.048820][T15233] do_SYSENTER_32+0x73/0x90 [ 674.048820][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 674.048820][T15233] [ 674.048820][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 674.048820][T15233] do_recvmmsg+0xc5/0x1ee0 [ 674.048820][T15233] do_recvmmsg+0xc5/0x1ee0 [ 675.245993][T15233] not chained 180000 origins [ 675.247969][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 675.247969][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.247969][T15233] Call Trace: [ 675.247969][T15233] dump_stack+0x1df/0x240 [ 675.272950][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 675.272950][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 675.272950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 675.272950][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 675.272950][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 675.272950][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 675.272950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 675.272950][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 675.272950][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 675.272950][T15233] ? _copy_from_user+0x15b/0x260 [ 675.272950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 675.272950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 675.272950][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 675.272950][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 675.272950][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 675.272950][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 675.272950][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] RIP: 0023:0xf7f39549 [ 675.272950][T15233] Code: Bad RIP value. [ 675.272950][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 675.272950][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 675.272950][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.272950][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 675.272950][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 675.272950][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 675.272950][T15233] Uninit was stored to memory at: [ 675.272950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] [ 675.272950][T15233] Uninit was stored to memory at: [ 675.272950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] [ 675.272950][T15233] Uninit was stored to memory at: [ 675.272950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] [ 675.272950][T15233] Uninit was stored to memory at: [ 675.272950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] [ 675.272950][T15233] Uninit was stored to memory at: [ 675.272950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] [ 675.272950][T15233] Uninit was stored to memory at: [ 675.272950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] [ 675.272950][T15233] Uninit was stored to memory at: [ 675.272950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 675.272950][T15233] __msan_chain_origin+0x50/0x90 [ 675.272950][T15233] __get_compat_msghdr+0x5be/0x890 [ 675.272950][T15233] get_compat_msghdr+0x108/0x270 [ 675.272950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 675.272950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 675.272950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 675.272950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 675.272950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 675.272950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 675.272950][T15233] do_SYSENTER_32+0x73/0x90 [ 675.272950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.272950][T15233] [ 675.272950][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 675.272950][T15233] do_recvmmsg+0xc5/0x1ee0 [ 675.272950][T15233] do_recvmmsg+0xc5/0x1ee0 [ 676.249685][T15233] not chained 190000 origins [ 676.254313][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 676.257968][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.257968][T15233] Call Trace: [ 676.257968][T15233] dump_stack+0x1df/0x240 [ 676.257968][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 676.257968][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 676.257968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 676.257968][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 676.257968][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 676.257968][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 676.257968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 676.257968][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 676.257968][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 676.257968][T15233] ? _copy_from_user+0x15b/0x260 [ 676.257968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.257968][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.257968][T15233] get_compat_msghdr+0x108/0x270 [ 676.257968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.257968][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 676.257968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 676.257968][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 676.257968][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 676.257968][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 676.257968][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 676.257968][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 676.257968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.257968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.257968][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 676.257968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.257968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.257968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.257968][T15233] do_SYSENTER_32+0x73/0x90 [ 676.257968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.257968][T15233] RIP: 0023:0xf7f39549 [ 676.257968][T15233] Code: Bad RIP value. [ 676.257968][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 676.257968][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 676.257968][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 676.257968][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 676.257968][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 676.257968][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 676.257968][T15233] Uninit was stored to memory at: [ 676.257968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.257968][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.257968][T15233] get_compat_msghdr+0x108/0x270 [ 676.257968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.257968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.257968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.257968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.257968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.257968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.257968][T15233] do_SYSENTER_32+0x73/0x90 [ 676.257968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.257968][T15233] [ 676.257968][T15233] Uninit was stored to memory at: [ 676.257968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.257968][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.257968][T15233] get_compat_msghdr+0x108/0x270 [ 676.257968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.257968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.257968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.257968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.257968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.257968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.257968][T15233] do_SYSENTER_32+0x73/0x90 [ 676.257968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.257968][T15233] [ 676.257968][T15233] Uninit was stored to memory at: [ 676.257968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.257968][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.257968][T15233] get_compat_msghdr+0x108/0x270 [ 676.257968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.257968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.257968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.257968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.257968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.257968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.257968][T15233] do_SYSENTER_32+0x73/0x90 [ 676.257968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.257968][T15233] [ 676.257968][T15233] Uninit was stored to memory at: [ 676.257968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.257968][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.257968][T15233] get_compat_msghdr+0x108/0x270 [ 676.257968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.257968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.257968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.257968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.257968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.257968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.257968][T15233] do_SYSENTER_32+0x73/0x90 [ 676.257968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.257968][T15233] [ 676.257968][T15233] Uninit was stored to memory at: [ 676.257968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.257968][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.257968][T15233] get_compat_msghdr+0x108/0x270 [ 676.257968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.257968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.257968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.257968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.257968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.257968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.257968][T15233] do_SYSENTER_32+0x73/0x90 [ 676.257968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.257968][T15233] [ 676.257968][T15233] Uninit was stored to memory at: [ 676.257968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.257968][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.257968][T15233] get_compat_msghdr+0x108/0x270 [ 676.257968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.257968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.257968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.257968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.257968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.257968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.257968][T15233] do_SYSENTER_32+0x73/0x90 [ 676.257968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.257968][T15233] [ 676.257968][T15233] Uninit was stored to memory at: [ 676.257968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 676.257968][T15233] __msan_chain_origin+0x50/0x90 [ 676.934620][T15233] __get_compat_msghdr+0x5be/0x890 [ 676.934620][T15233] get_compat_msghdr+0x108/0x270 [ 676.934620][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 676.934620][T15233] __sys_recvmmsg+0x4ca/0x510 [ 676.934620][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 676.934620][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 676.934620][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 676.934620][T15233] do_fast_syscall_32+0x6b/0xd0 [ 676.934620][T15233] do_SYSENTER_32+0x73/0x90 [ 676.934620][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.934620][T15233] [ 676.934620][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 676.934620][T15233] do_recvmmsg+0xc5/0x1ee0 [ 676.934620][T15233] do_recvmmsg+0xc5/0x1ee0 [ 677.344970][T15233] not chained 200000 origins [ 677.347979][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 677.347979][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.347979][T15233] Call Trace: [ 677.347979][T15233] dump_stack+0x1df/0x240 [ 677.347979][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 677.347979][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 677.347979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 677.347979][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 677.347979][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 677.347979][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 677.347979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 677.347979][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 677.347979][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 677.347979][T15233] ? _copy_from_user+0x15b/0x260 [ 677.347979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 677.347979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 677.347979][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 677.347979][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 677.347979][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 677.347979][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 677.347979][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] RIP: 0023:0xf7f39549 [ 677.347979][T15233] Code: Bad RIP value. [ 677.347979][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 677.347979][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 677.347979][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 677.347979][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.347979][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 677.347979][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.347979][T15233] Uninit was stored to memory at: [ 677.347979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] [ 677.347979][T15233] Uninit was stored to memory at: [ 677.347979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] [ 677.347979][T15233] Uninit was stored to memory at: [ 677.347979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] [ 677.347979][T15233] Uninit was stored to memory at: [ 677.347979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] [ 677.347979][T15233] Uninit was stored to memory at: [ 677.347979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] [ 677.347979][T15233] Uninit was stored to memory at: [ 677.347979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] [ 677.347979][T15233] Uninit was stored to memory at: [ 677.347979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 677.347979][T15233] __msan_chain_origin+0x50/0x90 [ 677.347979][T15233] __get_compat_msghdr+0x5be/0x890 [ 677.347979][T15233] get_compat_msghdr+0x108/0x270 [ 677.347979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 677.347979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 677.347979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 677.347979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 677.347979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 677.347979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 677.347979][T15233] do_SYSENTER_32+0x73/0x90 [ 677.347979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 677.347979][T15233] [ 677.347979][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 677.347979][T15233] do_recvmmsg+0xc5/0x1ee0 [ 677.347979][T15233] do_recvmmsg+0xc5/0x1ee0 [ 678.312003][T15233] not chained 210000 origins [ 678.316632][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 678.317966][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.317966][T15233] Call Trace: [ 678.317966][T15233] dump_stack+0x1df/0x240 [ 678.317966][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 678.317966][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 678.317966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 678.317966][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 678.317966][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 678.317966][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 678.317966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 678.317966][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 678.317966][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 678.317966][T15233] ? _copy_from_user+0x15b/0x260 [ 678.317966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 678.317966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 678.317966][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 678.317966][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 678.317966][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 678.317966][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 678.317966][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] RIP: 0023:0xf7f39549 [ 678.317966][T15233] Code: Bad RIP value. [ 678.317966][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 678.317966][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 678.317966][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 678.317966][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.317966][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 678.317966][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.317966][T15233] Uninit was stored to memory at: [ 678.317966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] [ 678.317966][T15233] Uninit was stored to memory at: [ 678.317966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] [ 678.317966][T15233] Uninit was stored to memory at: [ 678.317966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] [ 678.317966][T15233] Uninit was stored to memory at: [ 678.317966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] [ 678.317966][T15233] Uninit was stored to memory at: [ 678.317966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] [ 678.317966][T15233] Uninit was stored to memory at: [ 678.317966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] [ 678.317966][T15233] Uninit was stored to memory at: [ 678.317966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 678.317966][T15233] __msan_chain_origin+0x50/0x90 [ 678.317966][T15233] __get_compat_msghdr+0x5be/0x890 [ 678.317966][T15233] get_compat_msghdr+0x108/0x270 [ 678.317966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 678.317966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 678.317966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 678.317966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 678.317966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 678.317966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 678.317966][T15233] do_SYSENTER_32+0x73/0x90 [ 678.317966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 678.317966][T15233] [ 678.317966][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 678.317966][T15233] do_recvmmsg+0xc5/0x1ee0 [ 678.317966][T15233] do_recvmmsg+0xc5/0x1ee0 [ 679.285056][T15233] not chained 220000 origins [ 679.287959][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 679.287959][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.287959][T15233] Call Trace: [ 679.287959][T15233] dump_stack+0x1df/0x240 [ 679.287959][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 679.287959][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 679.287959][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 679.287959][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 679.287959][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 679.287959][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 679.287959][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 679.287959][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 679.287959][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 679.287959][T15233] ? _copy_from_user+0x15b/0x260 [ 679.287959][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 679.287959][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 679.287959][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 679.287959][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 679.287959][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 679.287959][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 679.287959][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] RIP: 0023:0xf7f39549 [ 679.287959][T15233] Code: Bad RIP value. [ 679.287959][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 679.287959][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 679.287959][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.287959][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.287959][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 679.287959][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.287959][T15233] Uninit was stored to memory at: [ 679.287959][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] [ 679.287959][T15233] Uninit was stored to memory at: [ 679.287959][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] [ 679.287959][T15233] Uninit was stored to memory at: [ 679.287959][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] [ 679.287959][T15233] Uninit was stored to memory at: [ 679.287959][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] [ 679.287959][T15233] Uninit was stored to memory at: [ 679.287959][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] [ 679.287959][T15233] Uninit was stored to memory at: [ 679.287959][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] [ 679.287959][T15233] Uninit was stored to memory at: [ 679.287959][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 679.287959][T15233] __msan_chain_origin+0x50/0x90 [ 679.287959][T15233] __get_compat_msghdr+0x5be/0x890 [ 679.287959][T15233] get_compat_msghdr+0x108/0x270 [ 679.287959][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 679.287959][T15233] __sys_recvmmsg+0x4ca/0x510 [ 679.287959][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 679.287959][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 679.287959][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 679.287959][T15233] do_fast_syscall_32+0x6b/0xd0 [ 679.287959][T15233] do_SYSENTER_32+0x73/0x90 [ 679.287959][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 679.287959][T15233] [ 679.287959][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 679.287959][T15233] do_recvmmsg+0xc5/0x1ee0 [ 679.287959][T15233] do_recvmmsg+0xc5/0x1ee0 [ 680.297863][T15233] not chained 230000 origins [ 680.297948][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 680.297948][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.297948][T15233] Call Trace: [ 680.297948][T15233] dump_stack+0x1df/0x240 [ 680.297948][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 680.297948][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 680.297948][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 680.297948][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.297948][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 680.297948][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 680.297948][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 680.297948][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 680.297948][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 680.297948][T15233] ? _copy_from_user+0x15b/0x260 [ 680.297948][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 680.297948][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 680.297948][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 680.297948][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 680.297948][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 680.297948][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 680.297948][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] RIP: 0023:0xf7f39549 [ 680.297948][T15233] Code: Bad RIP value. [ 680.297948][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 680.297948][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 680.297948][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 680.297948][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 680.297948][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 680.297948][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.297948][T15233] Uninit was stored to memory at: [ 680.297948][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] [ 680.297948][T15233] Uninit was stored to memory at: [ 680.297948][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] [ 680.297948][T15233] Uninit was stored to memory at: [ 680.297948][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] [ 680.297948][T15233] Uninit was stored to memory at: [ 680.297948][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] [ 680.297948][T15233] Uninit was stored to memory at: [ 680.297948][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] [ 680.297948][T15233] Uninit was stored to memory at: [ 680.297948][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] [ 680.297948][T15233] Uninit was stored to memory at: [ 680.297948][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 680.297948][T15233] __msan_chain_origin+0x50/0x90 [ 680.297948][T15233] __get_compat_msghdr+0x5be/0x890 [ 680.297948][T15233] get_compat_msghdr+0x108/0x270 [ 680.297948][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 680.297948][T15233] __sys_recvmmsg+0x4ca/0x510 [ 680.297948][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 680.297948][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 680.297948][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 680.297948][T15233] do_fast_syscall_32+0x6b/0xd0 [ 680.297948][T15233] do_SYSENTER_32+0x73/0x90 [ 680.297948][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 680.297948][T15233] [ 680.297948][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 680.297948][T15233] do_recvmmsg+0xc5/0x1ee0 [ 680.297948][T15233] do_recvmmsg+0xc5/0x1ee0 [ 681.241890][T15233] not chained 240000 origins [ 681.246516][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 681.247960][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.247960][T15233] Call Trace: [ 681.247960][T15233] dump_stack+0x1df/0x240 [ 681.247960][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 681.247960][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 681.247960][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 681.247960][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 681.247960][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 681.247960][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 681.247960][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 681.247960][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 681.247960][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 681.247960][T15233] ? _copy_from_user+0x15b/0x260 [ 681.247960][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 681.247960][T15233] __msan_chain_origin+0x50/0x90 [ 681.247960][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.247960][T15233] get_compat_msghdr+0x108/0x270 [ 681.247960][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.247960][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 681.247960][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 681.247960][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 681.247960][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 681.247960][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 681.247960][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 681.247960][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 681.247960][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.247960][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.247960][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 681.247960][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] RIP: 0023:0xf7f39549 [ 681.408247][T15233] Code: Bad RIP value. [ 681.408247][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 681.408247][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 681.408247][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.408247][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.408247][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 681.408247][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.408247][T15233] Uninit was stored to memory at: [ 681.408247][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 681.408247][T15233] __msan_chain_origin+0x50/0x90 [ 681.408247][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.408247][T15233] get_compat_msghdr+0x108/0x270 [ 681.408247][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.408247][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.408247][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.408247][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] [ 681.408247][T15233] Uninit was stored to memory at: [ 681.408247][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 681.408247][T15233] __msan_chain_origin+0x50/0x90 [ 681.408247][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.408247][T15233] get_compat_msghdr+0x108/0x270 [ 681.408247][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.408247][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.408247][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.408247][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] [ 681.408247][T15233] Uninit was stored to memory at: [ 681.408247][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 681.408247][T15233] __msan_chain_origin+0x50/0x90 [ 681.408247][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.408247][T15233] get_compat_msghdr+0x108/0x270 [ 681.408247][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.408247][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.408247][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.408247][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] [ 681.408247][T15233] Uninit was stored to memory at: [ 681.408247][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 681.408247][T15233] __msan_chain_origin+0x50/0x90 [ 681.408247][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.408247][T15233] get_compat_msghdr+0x108/0x270 [ 681.408247][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.408247][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.408247][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.408247][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] [ 681.408247][T15233] Uninit was stored to memory at: [ 681.408247][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 681.408247][T15233] __msan_chain_origin+0x50/0x90 [ 681.408247][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.408247][T15233] get_compat_msghdr+0x108/0x270 [ 681.408247][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.408247][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.408247][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.408247][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] [ 681.408247][T15233] Uninit was stored to memory at: [ 681.408247][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 681.408247][T15233] __msan_chain_origin+0x50/0x90 [ 681.408247][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.408247][T15233] get_compat_msghdr+0x108/0x270 [ 681.408247][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.408247][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.408247][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.408247][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] [ 681.408247][T15233] Uninit was stored to memory at: [ 681.408247][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 681.408247][T15233] __msan_chain_origin+0x50/0x90 [ 681.408247][T15233] __get_compat_msghdr+0x5be/0x890 [ 681.408247][T15233] get_compat_msghdr+0x108/0x270 [ 681.408247][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 681.408247][T15233] __sys_recvmmsg+0x4ca/0x510 [ 681.408247][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 681.408247][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 681.408247][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 681.408247][T15233] do_fast_syscall_32+0x6b/0xd0 [ 681.408247][T15233] do_SYSENTER_32+0x73/0x90 [ 681.408247][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 681.408247][T15233] [ 681.408247][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 681.408247][T15233] do_recvmmsg+0xc5/0x1ee0 [ 681.408247][T15233] do_recvmmsg+0xc5/0x1ee0 [ 682.183545][T15233] not chained 250000 origins [ 682.187950][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 682.187950][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.187950][T15233] Call Trace: [ 682.187950][T15233] dump_stack+0x1df/0x240 [ 682.187950][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 682.187950][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 682.187950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 682.187950][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 682.187950][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 682.187950][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 682.187950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 682.187950][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 682.187950][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 682.187950][T15233] ? _copy_from_user+0x15b/0x260 [ 682.187950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 682.187950][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 682.187950][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 682.187950][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 682.187950][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 682.187950][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 682.187950][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] RIP: 0023:0xf7f39549 [ 682.187950][T15233] Code: Bad RIP value. [ 682.187950][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 682.187950][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 682.187950][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 682.187950][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.187950][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 682.187950][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 682.187950][T15233] Uninit was stored to memory at: [ 682.187950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] [ 682.187950][T15233] Uninit was stored to memory at: [ 682.187950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] [ 682.187950][T15233] Uninit was stored to memory at: [ 682.187950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] [ 682.187950][T15233] Uninit was stored to memory at: [ 682.187950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] [ 682.187950][T15233] Uninit was stored to memory at: [ 682.187950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] [ 682.187950][T15233] Uninit was stored to memory at: [ 682.187950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] [ 682.187950][T15233] Uninit was stored to memory at: [ 682.187950][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 682.187950][T15233] __msan_chain_origin+0x50/0x90 [ 682.187950][T15233] __get_compat_msghdr+0x5be/0x890 [ 682.187950][T15233] get_compat_msghdr+0x108/0x270 [ 682.187950][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 682.187950][T15233] __sys_recvmmsg+0x4ca/0x510 [ 682.187950][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 682.187950][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 682.187950][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 682.187950][T15233] do_fast_syscall_32+0x6b/0xd0 [ 682.187950][T15233] do_SYSENTER_32+0x73/0x90 [ 682.187950][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 682.187950][T15233] [ 682.187950][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 682.187950][T15233] do_recvmmsg+0xc5/0x1ee0 [ 682.187950][T15233] do_recvmmsg+0xc5/0x1ee0 [ 683.140652][T15233] not chained 260000 origins [ 683.145282][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 683.147964][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.147964][T15233] Call Trace: [ 683.147964][T15233] dump_stack+0x1df/0x240 [ 683.147964][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 683.147964][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 683.147964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 683.147964][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 683.147964][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 683.147964][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 683.147964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 683.147964][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 683.147964][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 683.147964][T15233] ? _copy_from_user+0x15b/0x260 [ 683.147964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 683.147964][T15233] __msan_chain_origin+0x50/0x90 [ 683.147964][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.147964][T15233] get_compat_msghdr+0x108/0x270 [ 683.147964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.147964][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 683.147964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 683.147964][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 683.147964][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 683.147964][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 683.147964][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 683.147964][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 683.147964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.147964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.147964][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 683.147964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.147964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.147964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.147964][T15233] do_SYSENTER_32+0x73/0x90 [ 683.147964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.147964][T15233] RIP: 0023:0xf7f39549 [ 683.147964][T15233] Code: Bad RIP value. [ 683.147964][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 683.147964][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 683.147964][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.147964][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.147964][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 683.147964][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.147964][T15233] Uninit was stored to memory at: [ 683.147964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 683.147964][T15233] __msan_chain_origin+0x50/0x90 [ 683.147964][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.147964][T15233] get_compat_msghdr+0x108/0x270 [ 683.147964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.415072][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.415072][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.415072][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.415072][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.415072][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.415072][T15233] do_SYSENTER_32+0x73/0x90 [ 683.415072][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.415072][T15233] [ 683.415072][T15233] Uninit was stored to memory at: [ 683.415072][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 683.415072][T15233] __msan_chain_origin+0x50/0x90 [ 683.415072][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.415072][T15233] get_compat_msghdr+0x108/0x270 [ 683.415072][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.415072][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.415072][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.415072][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.415072][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.415072][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.415072][T15233] do_SYSENTER_32+0x73/0x90 [ 683.415072][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.415072][T15233] [ 683.415072][T15233] Uninit was stored to memory at: [ 683.415072][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 683.415072][T15233] __msan_chain_origin+0x50/0x90 [ 683.415072][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.415072][T15233] get_compat_msghdr+0x108/0x270 [ 683.415072][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.415072][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.415072][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.415072][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.415072][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.415072][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.415072][T15233] do_SYSENTER_32+0x73/0x90 [ 683.415072][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.415072][T15233] [ 683.415072][T15233] Uninit was stored to memory at: [ 683.415072][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 683.415072][T15233] __msan_chain_origin+0x50/0x90 [ 683.415072][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.415072][T15233] get_compat_msghdr+0x108/0x270 [ 683.415072][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.415072][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.415072][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.415072][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.415072][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.415072][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.415072][T15233] do_SYSENTER_32+0x73/0x90 [ 683.415072][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.415072][T15233] [ 683.415072][T15233] Uninit was stored to memory at: [ 683.415072][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 683.415072][T15233] __msan_chain_origin+0x50/0x90 [ 683.415072][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.415072][T15233] get_compat_msghdr+0x108/0x270 [ 683.415072][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.415072][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.415072][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.415072][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.415072][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.415072][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.415072][T15233] do_SYSENTER_32+0x73/0x90 [ 683.415072][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.415072][T15233] [ 683.415072][T15233] Uninit was stored to memory at: [ 683.415072][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 683.415072][T15233] __msan_chain_origin+0x50/0x90 [ 683.415072][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.415072][T15233] get_compat_msghdr+0x108/0x270 [ 683.415072][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.415072][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.415072][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.415072][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.415072][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.415072][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.415072][T15233] do_SYSENTER_32+0x73/0x90 [ 683.415072][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.415072][T15233] [ 683.415072][T15233] Uninit was stored to memory at: [ 683.415072][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 683.415072][T15233] __msan_chain_origin+0x50/0x90 [ 683.415072][T15233] __get_compat_msghdr+0x5be/0x890 [ 683.415072][T15233] get_compat_msghdr+0x108/0x270 [ 683.415072][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 683.415072][T15233] __sys_recvmmsg+0x4ca/0x510 [ 683.415072][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 683.415072][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 683.415072][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 683.415072][T15233] do_fast_syscall_32+0x6b/0xd0 [ 683.415072][T15233] do_SYSENTER_32+0x73/0x90 [ 683.415072][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 683.415072][T15233] [ 683.415072][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 683.415072][T15233] do_recvmmsg+0xc5/0x1ee0 [ 683.415072][T15233] do_recvmmsg+0xc5/0x1ee0 [ 684.103777][T15233] not chained 270000 origins [ 684.107966][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 684.107966][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.107966][T15233] Call Trace: [ 684.107966][T15233] dump_stack+0x1df/0x240 [ 684.107966][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 684.107966][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 684.107966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 684.107966][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 684.107966][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 684.107966][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 684.107966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 684.107966][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 684.107966][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 684.107966][T15233] ? _copy_from_user+0x15b/0x260 [ 684.107966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 684.107966][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 684.107966][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 684.107966][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 684.107966][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 684.107966][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 684.107966][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] RIP: 0023:0xf7f39549 [ 684.107966][T15233] Code: Bad RIP value. [ 684.107966][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 684.107966][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 684.107966][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.107966][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 684.107966][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 684.107966][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.107966][T15233] Uninit was stored to memory at: [ 684.107966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] [ 684.107966][T15233] Uninit was stored to memory at: [ 684.107966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] [ 684.107966][T15233] Uninit was stored to memory at: [ 684.107966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] [ 684.107966][T15233] Uninit was stored to memory at: [ 684.107966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] [ 684.107966][T15233] Uninit was stored to memory at: [ 684.107966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] [ 684.107966][T15233] Uninit was stored to memory at: [ 684.107966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] [ 684.107966][T15233] Uninit was stored to memory at: [ 684.107966][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 684.107966][T15233] __msan_chain_origin+0x50/0x90 [ 684.107966][T15233] __get_compat_msghdr+0x5be/0x890 [ 684.107966][T15233] get_compat_msghdr+0x108/0x270 [ 684.107966][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 684.107966][T15233] __sys_recvmmsg+0x4ca/0x510 [ 684.107966][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 684.107966][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 684.107966][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 684.107966][T15233] do_fast_syscall_32+0x6b/0xd0 [ 684.107966][T15233] do_SYSENTER_32+0x73/0x90 [ 684.107966][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 684.107966][T15233] [ 684.107966][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 684.107966][T15233] do_recvmmsg+0xc5/0x1ee0 [ 684.107966][T15233] do_recvmmsg+0xc5/0x1ee0 [ 685.045546][T15233] not chained 280000 origins [ 685.047969][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 685.047969][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.047969][T15233] Call Trace: [ 685.047969][T15233] dump_stack+0x1df/0x240 [ 685.047969][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 685.047969][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 685.047969][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 685.047969][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 685.047969][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 685.047969][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 685.047969][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 685.047969][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 685.047969][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 685.047969][T15233] ? _copy_from_user+0x15b/0x260 [ 685.047969][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 685.047969][T15233] __msan_chain_origin+0x50/0x90 [ 685.047969][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.047969][T15233] get_compat_msghdr+0x108/0x270 [ 685.047969][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.047969][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 685.047969][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 685.047969][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 685.047969][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 685.047969][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 685.047969][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 685.047969][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 685.047969][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.047969][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.047969][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 685.047969][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.047969][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.047969][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.047969][T15233] do_SYSENTER_32+0x73/0x90 [ 685.047969][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.047969][T15233] RIP: 0023:0xf7f39549 [ 685.047969][T15233] Code: Bad RIP value. [ 685.047969][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 685.047969][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 685.047969][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.047969][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 685.047969][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 685.047969][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 685.047969][T15233] Uninit was stored to memory at: [ 685.047969][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 685.047969][T15233] __msan_chain_origin+0x50/0x90 [ 685.047969][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.047969][T15233] get_compat_msghdr+0x108/0x270 [ 685.047969][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.047969][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.047969][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.047969][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.047969][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.047969][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.047969][T15233] do_SYSENTER_32+0x73/0x90 [ 685.047969][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.047969][T15233] [ 685.047969][T15233] Uninit was stored to memory at: [ 685.047969][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 685.047969][T15233] __msan_chain_origin+0x50/0x90 [ 685.047969][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.047969][T15233] get_compat_msghdr+0x108/0x270 [ 685.047969][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.047969][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.047969][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.047969][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.047969][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.047969][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.419227][T15233] do_SYSENTER_32+0x73/0x90 [ 685.419227][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.419227][T15233] [ 685.419227][T15233] Uninit was stored to memory at: [ 685.419227][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 685.419227][T15233] __msan_chain_origin+0x50/0x90 [ 685.419227][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.419227][T15233] get_compat_msghdr+0x108/0x270 [ 685.419227][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.419227][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.419227][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.419227][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.419227][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.419227][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.419227][T15233] do_SYSENTER_32+0x73/0x90 [ 685.419227][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.419227][T15233] [ 685.419227][T15233] Uninit was stored to memory at: [ 685.419227][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 685.419227][T15233] __msan_chain_origin+0x50/0x90 [ 685.419227][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.419227][T15233] get_compat_msghdr+0x108/0x270 [ 685.419227][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.419227][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.419227][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.419227][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.419227][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.419227][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.419227][T15233] do_SYSENTER_32+0x73/0x90 [ 685.419227][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.419227][T15233] [ 685.419227][T15233] Uninit was stored to memory at: [ 685.419227][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 685.419227][T15233] __msan_chain_origin+0x50/0x90 [ 685.419227][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.419227][T15233] get_compat_msghdr+0x108/0x270 [ 685.419227][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.419227][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.419227][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.419227][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.419227][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.419227][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.419227][T15233] do_SYSENTER_32+0x73/0x90 [ 685.419227][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.419227][T15233] [ 685.419227][T15233] Uninit was stored to memory at: [ 685.419227][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 685.419227][T15233] __msan_chain_origin+0x50/0x90 [ 685.419227][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.419227][T15233] get_compat_msghdr+0x108/0x270 [ 685.419227][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.419227][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.419227][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.419227][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.419227][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.419227][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.419227][T15233] do_SYSENTER_32+0x73/0x90 [ 685.419227][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.419227][T15233] [ 685.419227][T15233] Uninit was stored to memory at: [ 685.419227][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 685.419227][T15233] __msan_chain_origin+0x50/0x90 [ 685.419227][T15233] __get_compat_msghdr+0x5be/0x890 [ 685.419227][T15233] get_compat_msghdr+0x108/0x270 [ 685.419227][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 685.419227][T15233] __sys_recvmmsg+0x4ca/0x510 [ 685.419227][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 685.419227][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 685.419227][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 685.419227][T15233] do_fast_syscall_32+0x6b/0xd0 [ 685.419227][T15233] do_SYSENTER_32+0x73/0x90 [ 685.419227][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 685.419227][T15233] [ 685.419227][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 685.419227][T15233] do_recvmmsg+0xc5/0x1ee0 [ 685.419227][T15233] do_recvmmsg+0xc5/0x1ee0 [ 686.007159][T15233] not chained 290000 origins [ 686.007972][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 686.007972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.030342][T15233] Call Trace: [ 686.030342][T15233] dump_stack+0x1df/0x240 [ 686.030342][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 686.030342][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 686.048240][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.048240][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 686.048240][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 686.048240][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 686.048240][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.048240][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 686.048240][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 686.048240][T15233] ? _copy_from_user+0x15b/0x260 [ 686.048240][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 686.048240][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.048240][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 686.048240][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 686.048240][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 686.048240][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 686.048240][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] RIP: 0023:0xf7f39549 [ 686.048240][T15233] Code: Bad RIP value. [ 686.048240][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 686.048240][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 686.048240][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.048240][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 686.048240][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 686.048240][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.048240][T15233] Uninit was stored to memory at: [ 686.048240][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] [ 686.048240][T15233] Uninit was stored to memory at: [ 686.048240][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] [ 686.048240][T15233] Uninit was stored to memory at: [ 686.048240][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] [ 686.048240][T15233] Uninit was stored to memory at: [ 686.048240][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] [ 686.048240][T15233] Uninit was stored to memory at: [ 686.048240][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] [ 686.048240][T15233] Uninit was stored to memory at: [ 686.048240][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] [ 686.048240][T15233] Uninit was stored to memory at: [ 686.048240][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.048240][T15233] __msan_chain_origin+0x50/0x90 [ 686.048240][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.048240][T15233] get_compat_msghdr+0x108/0x270 [ 686.048240][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.048240][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.048240][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.048240][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.048240][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.048240][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.048240][T15233] do_SYSENTER_32+0x73/0x90 [ 686.048240][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.048240][T15233] [ 686.048240][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 686.048240][T15233] do_recvmmsg+0xc5/0x1ee0 [ 686.048240][T15233] do_recvmmsg+0xc5/0x1ee0 [ 686.966957][T15233] not chained 300000 origins [ 686.967977][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 686.967977][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.967977][T15233] Call Trace: [ 686.967977][T15233] dump_stack+0x1df/0x240 [ 686.967977][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 686.967977][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 686.967977][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.967977][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 686.967977][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 686.967977][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 686.967977][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.967977][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 686.967977][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 686.967977][T15233] ? _copy_from_user+0x15b/0x260 [ 686.967977][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 686.967977][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 686.967977][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 686.967977][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 686.967977][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 686.967977][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 686.967977][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] RIP: 0023:0xf7f39549 [ 686.967977][T15233] Code: Bad RIP value. [ 686.967977][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 686.967977][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 686.967977][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.967977][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 686.967977][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 686.967977][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.967977][T15233] Uninit was stored to memory at: [ 686.967977][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] [ 686.967977][T15233] Uninit was stored to memory at: [ 686.967977][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] [ 686.967977][T15233] Uninit was stored to memory at: [ 686.967977][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] [ 686.967977][T15233] Uninit was stored to memory at: [ 686.967977][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] [ 686.967977][T15233] Uninit was stored to memory at: [ 686.967977][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] [ 686.967977][T15233] Uninit was stored to memory at: [ 686.967977][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] [ 686.967977][T15233] Uninit was stored to memory at: [ 686.967977][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 686.967977][T15233] __msan_chain_origin+0x50/0x90 [ 686.967977][T15233] __get_compat_msghdr+0x5be/0x890 [ 686.967977][T15233] get_compat_msghdr+0x108/0x270 [ 686.967977][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 686.967977][T15233] __sys_recvmmsg+0x4ca/0x510 [ 686.967977][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 686.967977][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 686.967977][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 686.967977][T15233] do_fast_syscall_32+0x6b/0xd0 [ 686.967977][T15233] do_SYSENTER_32+0x73/0x90 [ 686.967977][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 686.967977][T15233] [ 686.967977][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 686.967977][T15233] do_recvmmsg+0xc5/0x1ee0 [ 686.967977][T15233] do_recvmmsg+0xc5/0x1ee0 [ 687.938562][T15233] not chained 310000 origins [ 687.943201][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 687.947979][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.947979][T15233] Call Trace: [ 687.947979][T15233] dump_stack+0x1df/0x240 [ 687.947979][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 687.947979][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 687.947979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 687.947979][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 687.947979][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 687.947979][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 687.947979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 687.947979][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 687.947979][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 687.947979][T15233] ? _copy_from_user+0x15b/0x260 [ 687.947979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 687.947979][T15233] __msan_chain_origin+0x50/0x90 [ 687.947979][T15233] __get_compat_msghdr+0x5be/0x890 [ 687.947979][T15233] get_compat_msghdr+0x108/0x270 [ 687.947979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 687.947979][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 687.947979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 687.947979][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 687.947979][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 687.947979][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 687.947979][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 687.947979][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 687.947979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 687.947979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 687.947979][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 687.947979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 687.947979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 687.947979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 687.947979][T15233] do_SYSENTER_32+0x73/0x90 [ 687.947979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 687.947979][T15233] RIP: 0023:0xf7f39549 [ 687.947979][T15233] Code: Bad RIP value. [ 687.947979][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 687.947979][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 687.947979][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.947979][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.947979][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 687.947979][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.947979][T15233] Uninit was stored to memory at: [ 687.947979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 687.947979][T15233] __msan_chain_origin+0x50/0x90 [ 687.947979][T15233] __get_compat_msghdr+0x5be/0x890 [ 687.947979][T15233] get_compat_msghdr+0x108/0x270 [ 687.947979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 687.947979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 687.947979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 687.947979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 687.947979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 687.947979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 687.947979][T15233] do_SYSENTER_32+0x73/0x90 [ 687.947979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 687.947979][T15233] [ 687.947979][T15233] Uninit was stored to memory at: [ 687.947979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 687.947979][T15233] __msan_chain_origin+0x50/0x90 [ 687.947979][T15233] __get_compat_msghdr+0x5be/0x890 [ 687.947979][T15233] get_compat_msghdr+0x108/0x270 [ 687.947979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 687.947979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 687.947979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 687.947979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 687.947979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 687.947979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 687.947979][T15233] do_SYSENTER_32+0x73/0x90 [ 687.947979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 687.947979][T15233] [ 687.947979][T15233] Uninit was stored to memory at: [ 687.947979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 687.947979][T15233] __msan_chain_origin+0x50/0x90 [ 687.947979][T15233] __get_compat_msghdr+0x5be/0x890 [ 687.947979][T15233] get_compat_msghdr+0x108/0x270 [ 687.947979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 687.947979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 687.947979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.368047][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.368047][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.368047][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.368047][T15233] do_SYSENTER_32+0x73/0x90 [ 688.368047][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.368047][T15233] [ 688.368047][T15233] Uninit was stored to memory at: [ 688.368047][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.368047][T15233] __msan_chain_origin+0x50/0x90 [ 688.368047][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.368047][T15233] get_compat_msghdr+0x108/0x270 [ 688.368047][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.368047][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.368047][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.368047][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.368047][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.368047][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.368047][T15233] do_SYSENTER_32+0x73/0x90 [ 688.368047][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.368047][T15233] [ 688.368047][T15233] Uninit was stored to memory at: [ 688.368047][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.368047][T15233] __msan_chain_origin+0x50/0x90 [ 688.368047][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.368047][T15233] get_compat_msghdr+0x108/0x270 [ 688.368047][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.368047][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.368047][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.368047][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.368047][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.368047][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.368047][T15233] do_SYSENTER_32+0x73/0x90 [ 688.368047][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.368047][T15233] [ 688.368047][T15233] Uninit was stored to memory at: [ 688.368047][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.368047][T15233] __msan_chain_origin+0x50/0x90 [ 688.368047][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.368047][T15233] get_compat_msghdr+0x108/0x270 [ 688.368047][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.368047][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.368047][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.368047][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.368047][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.368047][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.368047][T15233] do_SYSENTER_32+0x73/0x90 [ 688.368047][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.368047][T15233] [ 688.368047][T15233] Uninit was stored to memory at: [ 688.368047][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.368047][T15233] __msan_chain_origin+0x50/0x90 [ 688.368047][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.368047][T15233] get_compat_msghdr+0x108/0x270 [ 688.368047][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.368047][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.368047][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.368047][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.368047][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.368047][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.368047][T15233] do_SYSENTER_32+0x73/0x90 [ 688.368047][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.368047][T15233] [ 688.368047][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 688.368047][T15233] do_recvmmsg+0xc5/0x1ee0 [ 688.368047][T15233] do_recvmmsg+0xc5/0x1ee0 [ 688.941141][T15233] not chained 320000 origins [ 688.945770][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 688.947968][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.954961][T15233] Call Trace: [ 688.954961][T15233] dump_stack+0x1df/0x240 [ 688.954961][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 688.954961][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 688.954961][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 688.954961][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 688.954961][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 688.954961][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 688.954961][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 688.954961][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 688.954961][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 688.954961][T15233] ? _copy_from_user+0x15b/0x260 [ 688.954961][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 688.954961][T15233] __msan_chain_origin+0x50/0x90 [ 688.954961][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.954961][T15233] get_compat_msghdr+0x108/0x270 [ 688.954961][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.954961][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 688.954961][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 688.954961][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 688.954961][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 688.954961][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 688.954961][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 688.954961][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 688.954961][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.954961][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.954961][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 688.954961][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.954961][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.954961][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.954961][T15233] do_SYSENTER_32+0x73/0x90 [ 688.954961][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.954961][T15233] RIP: 0023:0xf7f39549 [ 688.954961][T15233] Code: Bad RIP value. [ 688.954961][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 688.954961][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 688.954961][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.954961][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.954961][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 688.954961][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 688.954961][T15233] Uninit was stored to memory at: [ 688.954961][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.954961][T15233] __msan_chain_origin+0x50/0x90 [ 688.954961][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.954961][T15233] get_compat_msghdr+0x108/0x270 [ 688.954961][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.954961][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.954961][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.954961][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.954961][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.954961][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.954961][T15233] do_SYSENTER_32+0x73/0x90 [ 688.954961][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.954961][T15233] [ 688.954961][T15233] Uninit was stored to memory at: [ 688.954961][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.954961][T15233] __msan_chain_origin+0x50/0x90 [ 688.954961][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.954961][T15233] get_compat_msghdr+0x108/0x270 [ 688.954961][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.954961][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.954961][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.954961][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.954961][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.954961][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.954961][T15233] do_SYSENTER_32+0x73/0x90 [ 688.954961][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.954961][T15233] [ 688.954961][T15233] Uninit was stored to memory at: [ 688.954961][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.954961][T15233] __msan_chain_origin+0x50/0x90 [ 688.954961][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.954961][T15233] get_compat_msghdr+0x108/0x270 [ 688.954961][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.954961][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.954961][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.954961][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.954961][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.954961][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.954961][T15233] do_SYSENTER_32+0x73/0x90 [ 688.954961][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 688.954961][T15233] [ 688.954961][T15233] Uninit was stored to memory at: [ 688.954961][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 688.954961][T15233] __msan_chain_origin+0x50/0x90 [ 688.954961][T15233] __get_compat_msghdr+0x5be/0x890 [ 688.954961][T15233] get_compat_msghdr+0x108/0x270 [ 688.954961][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 688.954961][T15233] __sys_recvmmsg+0x4ca/0x510 [ 688.954961][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 688.954961][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 688.954961][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 688.954961][T15233] do_fast_syscall_32+0x6b/0xd0 [ 688.954961][T15233] do_SYSENTER_32+0x73/0x90 [ 688.954961][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.468091][T15233] [ 689.468091][T15233] Uninit was stored to memory at: [ 689.468091][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.468091][T15233] __msan_chain_origin+0x50/0x90 [ 689.468091][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.468091][T15233] get_compat_msghdr+0x108/0x270 [ 689.468091][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.468091][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.468091][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.468091][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.468091][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.468091][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.468091][T15233] do_SYSENTER_32+0x73/0x90 [ 689.468091][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.468091][T15233] [ 689.468091][T15233] Uninit was stored to memory at: [ 689.468091][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.468091][T15233] __msan_chain_origin+0x50/0x90 [ 689.468091][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.468091][T15233] get_compat_msghdr+0x108/0x270 [ 689.468091][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.468091][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.468091][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.468091][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.468091][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.468091][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.468091][T15233] do_SYSENTER_32+0x73/0x90 [ 689.468091][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.468091][T15233] [ 689.468091][T15233] Uninit was stored to memory at: [ 689.468091][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.468091][T15233] __msan_chain_origin+0x50/0x90 [ 689.468091][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.468091][T15233] get_compat_msghdr+0x108/0x270 [ 689.468091][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.468091][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.468091][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.468091][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.468091][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.468091][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.468091][T15233] do_SYSENTER_32+0x73/0x90 [ 689.468091][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.468091][T15233] [ 689.468091][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 689.468091][T15233] do_recvmmsg+0xc5/0x1ee0 [ 689.468091][T15233] do_recvmmsg+0xc5/0x1ee0 [ 689.923441][T15233] not chained 330000 origins [ 689.927968][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 689.927968][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.927968][T15233] Call Trace: [ 689.927968][T15233] dump_stack+0x1df/0x240 [ 689.927968][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 689.927968][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 689.927968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 689.927968][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 689.927968][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 689.927968][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 689.927968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 689.927968][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 689.927968][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 689.927968][T15233] ? _copy_from_user+0x15b/0x260 [ 689.927968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 689.927968][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 689.927968][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 689.927968][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 689.927968][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 689.927968][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 689.927968][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] RIP: 0023:0xf7f39549 [ 689.927968][T15233] Code: Bad RIP value. [ 689.927968][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 689.927968][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 689.927968][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 689.927968][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.927968][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 689.927968][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.927968][T15233] Uninit was stored to memory at: [ 689.927968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] [ 689.927968][T15233] Uninit was stored to memory at: [ 689.927968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] [ 689.927968][T15233] Uninit was stored to memory at: [ 689.927968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] [ 689.927968][T15233] Uninit was stored to memory at: [ 689.927968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] [ 689.927968][T15233] Uninit was stored to memory at: [ 689.927968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] [ 689.927968][T15233] Uninit was stored to memory at: [ 689.927968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] [ 689.927968][T15233] Uninit was stored to memory at: [ 689.927968][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 689.927968][T15233] __msan_chain_origin+0x50/0x90 [ 689.927968][T15233] __get_compat_msghdr+0x5be/0x890 [ 689.927968][T15233] get_compat_msghdr+0x108/0x270 [ 689.927968][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 689.927968][T15233] __sys_recvmmsg+0x4ca/0x510 [ 689.927968][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 689.927968][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 689.927968][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 689.927968][T15233] do_fast_syscall_32+0x6b/0xd0 [ 689.927968][T15233] do_SYSENTER_32+0x73/0x90 [ 689.927968][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 689.927968][T15233] [ 689.927968][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 689.927968][T15233] do_recvmmsg+0xc5/0x1ee0 [ 689.927968][T15233] do_recvmmsg+0xc5/0x1ee0 [ 690.880369][T15233] not chained 340000 origins [ 690.885001][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 690.887956][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.898060][T15233] Call Trace: [ 690.898060][T15233] dump_stack+0x1df/0x240 [ 690.898060][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 690.898060][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 690.898060][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 690.898060][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 690.898060][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 690.898060][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 690.898060][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 690.898060][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 690.898060][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 690.898060][T15233] ? _copy_from_user+0x15b/0x260 [ 690.898060][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 690.898060][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 690.898060][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 690.898060][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 690.898060][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 690.898060][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 690.898060][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] RIP: 0023:0xf7f39549 [ 690.898060][T15233] Code: Bad RIP value. [ 690.898060][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 690.898060][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 690.898060][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 690.898060][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 690.898060][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 690.898060][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 690.898060][T15233] Uninit was stored to memory at: [ 690.898060][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] [ 690.898060][T15233] Uninit was stored to memory at: [ 690.898060][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] [ 690.898060][T15233] Uninit was stored to memory at: [ 690.898060][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] [ 690.898060][T15233] Uninit was stored to memory at: [ 690.898060][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] [ 690.898060][T15233] Uninit was stored to memory at: [ 690.898060][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] [ 690.898060][T15233] Uninit was stored to memory at: [ 690.898060][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] [ 690.898060][T15233] Uninit was stored to memory at: [ 690.898060][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 690.898060][T15233] __msan_chain_origin+0x50/0x90 [ 690.898060][T15233] __get_compat_msghdr+0x5be/0x890 [ 690.898060][T15233] get_compat_msghdr+0x108/0x270 [ 690.898060][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 690.898060][T15233] __sys_recvmmsg+0x4ca/0x510 [ 690.898060][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 690.898060][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 690.898060][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 690.898060][T15233] do_fast_syscall_32+0x6b/0xd0 [ 690.898060][T15233] do_SYSENTER_32+0x73/0x90 [ 690.898060][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 690.898060][T15233] [ 690.898060][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 690.898060][T15233] do_recvmmsg+0xc5/0x1ee0 [ 690.898060][T15233] do_recvmmsg+0xc5/0x1ee0 [ 691.835496][T15233] not chained 350000 origins [ 691.838055][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 691.838055][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.838055][T15233] Call Trace: [ 691.838055][T15233] dump_stack+0x1df/0x240 [ 691.838055][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 691.838055][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 691.838055][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 691.838055][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 691.888034][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 691.888034][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 691.888034][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 691.888034][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 691.888034][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 691.888034][T15233] ? _copy_from_user+0x15b/0x260 [ 691.888034][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 691.888034][T15233] __msan_chain_origin+0x50/0x90 [ 691.888034][T15233] __get_compat_msghdr+0x5be/0x890 [ 691.888034][T15233] get_compat_msghdr+0x108/0x270 [ 691.888034][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 691.888034][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 691.948113][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 691.948113][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 691.948113][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 691.948113][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 691.948113][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 691.948113][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 691.948113][T15233] __sys_recvmmsg+0x4ca/0x510 [ 691.948113][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 691.948113][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 691.948113][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 691.948113][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 691.948113][T15233] do_fast_syscall_32+0x6b/0xd0 [ 691.948113][T15233] do_SYSENTER_32+0x73/0x90 [ 692.018123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.018123][T15233] RIP: 0023:0xf7f39549 [ 692.018123][T15233] Code: Bad RIP value. [ 692.018123][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 692.018123][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 692.018123][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.018123][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.018123][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 692.018123][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.018123][T15233] Uninit was stored to memory at: [ 692.088129][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.088129][T15233] __msan_chain_origin+0x50/0x90 [ 692.088129][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.088129][T15233] get_compat_msghdr+0x108/0x270 [ 692.088129][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.088129][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.088129][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.088129][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.088129][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.088129][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.088129][T15233] do_SYSENTER_32+0x73/0x90 [ 692.088129][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.088129][T15233] [ 692.088129][T15233] Uninit was stored to memory at: [ 692.088129][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.088129][T15233] __msan_chain_origin+0x50/0x90 [ 692.088129][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.088129][T15233] get_compat_msghdr+0x108/0x270 [ 692.088129][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.088129][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.088129][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.088129][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.088129][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.088129][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.088129][T15233] do_SYSENTER_32+0x73/0x90 [ 692.088129][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.088129][T15233] [ 692.088129][T15233] Uninit was stored to memory at: [ 692.088129][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.088129][T15233] __msan_chain_origin+0x50/0x90 [ 692.088129][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.088129][T15233] get_compat_msghdr+0x108/0x270 [ 692.088129][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.088129][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.088129][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.088129][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.088129][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.088129][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.088129][T15233] do_SYSENTER_32+0x73/0x90 [ 692.088129][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.088129][T15233] [ 692.088129][T15233] Uninit was stored to memory at: [ 692.088129][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.088129][T15233] __msan_chain_origin+0x50/0x90 [ 692.088129][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.088129][T15233] get_compat_msghdr+0x108/0x270 [ 692.088129][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.088129][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.088129][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.088129][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.088129][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.088129][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.088129][T15233] do_SYSENTER_32+0x73/0x90 [ 692.088129][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.088129][T15233] [ 692.088129][T15233] Uninit was stored to memory at: [ 692.088129][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.088129][T15233] __msan_chain_origin+0x50/0x90 [ 692.088129][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.088129][T15233] get_compat_msghdr+0x108/0x270 [ 692.088129][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.088129][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.088129][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.088129][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.088129][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.088129][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.088129][T15233] do_SYSENTER_32+0x73/0x90 [ 692.088129][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.088129][T15233] [ 692.088129][T15233] Uninit was stored to memory at: [ 692.088129][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.088129][T15233] __msan_chain_origin+0x50/0x90 [ 692.088129][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.088129][T15233] get_compat_msghdr+0x108/0x270 [ 692.088129][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.088129][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.088129][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.088129][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.088129][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.088129][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.088129][T15233] do_SYSENTER_32+0x73/0x90 [ 692.088129][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.088129][T15233] [ 692.088129][T15233] Uninit was stored to memory at: [ 692.088129][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.088129][T15233] __msan_chain_origin+0x50/0x90 [ 692.088129][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.088129][T15233] get_compat_msghdr+0x108/0x270 [ 692.088129][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.088129][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.088129][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.088129][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.088129][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.088129][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.088129][T15233] do_SYSENTER_32+0x73/0x90 [ 692.088129][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.088129][T15233] [ 692.088129][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 692.088129][T15233] do_recvmmsg+0xc5/0x1ee0 [ 692.088129][T15233] do_recvmmsg+0xc5/0x1ee0 [ 692.753747][T15233] not chained 360000 origins [ 692.757965][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 692.757965][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.757965][T15233] Call Trace: [ 692.757965][T15233] dump_stack+0x1df/0x240 [ 692.757965][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 692.757965][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 692.757965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 692.757965][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 692.757965][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 692.757965][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 692.757965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 692.757965][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 692.757965][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 692.757965][T15233] ? _copy_from_user+0x15b/0x260 [ 692.757965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 692.757965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 692.757965][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 692.757965][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 692.757965][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 692.757965][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 692.757965][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] RIP: 0023:0xf7f39549 [ 692.757965][T15233] Code: Bad RIP value. [ 692.757965][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 692.757965][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 692.757965][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.757965][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.757965][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 692.757965][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.757965][T15233] Uninit was stored to memory at: [ 692.757965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] [ 692.757965][T15233] Uninit was stored to memory at: [ 692.757965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] [ 692.757965][T15233] Uninit was stored to memory at: [ 692.757965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] [ 692.757965][T15233] Uninit was stored to memory at: [ 692.757965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] [ 692.757965][T15233] Uninit was stored to memory at: [ 692.757965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] [ 692.757965][T15233] Uninit was stored to memory at: [ 692.757965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] [ 692.757965][T15233] Uninit was stored to memory at: [ 692.757965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 692.757965][T15233] __msan_chain_origin+0x50/0x90 [ 692.757965][T15233] __get_compat_msghdr+0x5be/0x890 [ 692.757965][T15233] get_compat_msghdr+0x108/0x270 [ 692.757965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 692.757965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 692.757965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 692.757965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 692.757965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 692.757965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 692.757965][T15233] do_SYSENTER_32+0x73/0x90 [ 692.757965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 692.757965][T15233] [ 692.757965][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 692.757965][T15233] do_recvmmsg+0xc5/0x1ee0 [ 692.757965][T15233] do_recvmmsg+0xc5/0x1ee0 [ 693.675273][T15233] not chained 370000 origins [ 693.678123][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 693.678123][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.678123][T15233] Call Trace: [ 693.678123][T15233] dump_stack+0x1df/0x240 [ 693.678123][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 693.678123][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 693.678123][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 693.678123][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 693.678123][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 693.678123][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 693.678123][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 693.678123][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 693.678123][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 693.678123][T15233] ? _copy_from_user+0x15b/0x260 [ 693.678123][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 693.678123][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 693.678123][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 693.678123][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 693.678123][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 693.678123][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 693.678123][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] RIP: 0023:0xf7f39549 [ 693.678123][T15233] Code: Bad RIP value. [ 693.678123][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 693.678123][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 693.678123][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.678123][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 693.678123][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 693.678123][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.678123][T15233] Uninit was stored to memory at: [ 693.678123][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] [ 693.678123][T15233] Uninit was stored to memory at: [ 693.678123][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] [ 693.678123][T15233] Uninit was stored to memory at: [ 693.678123][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] [ 693.678123][T15233] Uninit was stored to memory at: [ 693.678123][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] [ 693.678123][T15233] Uninit was stored to memory at: [ 693.678123][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] [ 693.678123][T15233] Uninit was stored to memory at: [ 693.678123][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] [ 693.678123][T15233] Uninit was stored to memory at: [ 693.678123][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 693.678123][T15233] __msan_chain_origin+0x50/0x90 [ 693.678123][T15233] __get_compat_msghdr+0x5be/0x890 [ 693.678123][T15233] get_compat_msghdr+0x108/0x270 [ 693.678123][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 693.678123][T15233] __sys_recvmmsg+0x4ca/0x510 [ 693.678123][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 693.678123][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 693.678123][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 693.678123][T15233] do_fast_syscall_32+0x6b/0xd0 [ 693.678123][T15233] do_SYSENTER_32+0x73/0x90 [ 693.678123][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 693.678123][T15233] [ 693.678123][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 693.678123][T15233] do_recvmmsg+0xc5/0x1ee0 [ 693.678123][T15233] do_recvmmsg+0xc5/0x1ee0 [ 694.673939][T15233] not chained 380000 origins [ 694.677972][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 694.677972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.677972][T15233] Call Trace: [ 694.677972][T15233] dump_stack+0x1df/0x240 [ 694.677972][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 694.677972][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 694.677972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 694.677972][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 694.677972][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 694.677972][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 694.677972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 694.677972][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 694.677972][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 694.677972][T15233] ? _copy_from_user+0x15b/0x260 [ 694.677972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 694.677972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 694.677972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 694.677972][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 694.677972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 694.677972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 694.677972][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] RIP: 0023:0xf7f39549 [ 694.677972][T15233] Code: Bad RIP value. [ 694.677972][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 694.677972][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 694.677972][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.677972][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 694.677972][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 694.677972][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.677972][T15233] Uninit was stored to memory at: [ 694.677972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] [ 694.677972][T15233] Uninit was stored to memory at: [ 694.677972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] [ 694.677972][T15233] Uninit was stored to memory at: [ 694.677972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] [ 694.677972][T15233] Uninit was stored to memory at: [ 694.677972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] [ 694.677972][T15233] Uninit was stored to memory at: [ 694.677972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] [ 694.677972][T15233] Uninit was stored to memory at: [ 694.677972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] [ 694.677972][T15233] Uninit was stored to memory at: [ 694.677972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 694.677972][T15233] __msan_chain_origin+0x50/0x90 [ 694.677972][T15233] __get_compat_msghdr+0x5be/0x890 [ 694.677972][T15233] get_compat_msghdr+0x108/0x270 [ 694.677972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 694.677972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 694.677972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 694.677972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 694.677972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 694.677972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 694.677972][T15233] do_SYSENTER_32+0x73/0x90 [ 694.677972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 694.677972][T15233] [ 694.677972][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 694.677972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 694.677972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 695.607465][T15233] not chained 390000 origins [ 695.607951][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 695.607951][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.607951][T15233] Call Trace: [ 695.607951][T15233] dump_stack+0x1df/0x240 [ 695.607951][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 695.607951][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 695.607951][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 695.607951][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 695.607951][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 695.607951][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 695.607951][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 695.607951][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 695.607951][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 695.607951][T15233] ? _copy_from_user+0x15b/0x260 [ 695.607951][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 695.607951][T15233] __msan_chain_origin+0x50/0x90 [ 695.607951][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.607951][T15233] get_compat_msghdr+0x108/0x270 [ 695.607951][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.607951][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 695.607951][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 695.607951][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 695.607951][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 695.738064][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 695.738064][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 695.738064][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] RIP: 0023:0xf7f39549 [ 695.738064][T15233] Code: Bad RIP value. [ 695.738064][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 695.738064][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 695.738064][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.738064][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 695.738064][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 695.738064][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.738064][T15233] Uninit was stored to memory at: [ 695.738064][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 695.738064][T15233] __msan_chain_origin+0x50/0x90 [ 695.738064][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.738064][T15233] get_compat_msghdr+0x108/0x270 [ 695.738064][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] [ 695.738064][T15233] Uninit was stored to memory at: [ 695.738064][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 695.738064][T15233] __msan_chain_origin+0x50/0x90 [ 695.738064][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.738064][T15233] get_compat_msghdr+0x108/0x270 [ 695.738064][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] [ 695.738064][T15233] Uninit was stored to memory at: [ 695.738064][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 695.738064][T15233] __msan_chain_origin+0x50/0x90 [ 695.738064][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.738064][T15233] get_compat_msghdr+0x108/0x270 [ 695.738064][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] [ 695.738064][T15233] Uninit was stored to memory at: [ 695.738064][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 695.738064][T15233] __msan_chain_origin+0x50/0x90 [ 695.738064][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.738064][T15233] get_compat_msghdr+0x108/0x270 [ 695.738064][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] [ 695.738064][T15233] Uninit was stored to memory at: [ 695.738064][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 695.738064][T15233] __msan_chain_origin+0x50/0x90 [ 695.738064][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.738064][T15233] get_compat_msghdr+0x108/0x270 [ 695.738064][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] [ 695.738064][T15233] Uninit was stored to memory at: [ 695.738064][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 695.738064][T15233] __msan_chain_origin+0x50/0x90 [ 695.738064][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.738064][T15233] get_compat_msghdr+0x108/0x270 [ 695.738064][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] [ 695.738064][T15233] Uninit was stored to memory at: [ 695.738064][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 695.738064][T15233] __msan_chain_origin+0x50/0x90 [ 695.738064][T15233] __get_compat_msghdr+0x5be/0x890 [ 695.738064][T15233] get_compat_msghdr+0x108/0x270 [ 695.738064][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 695.738064][T15233] __sys_recvmmsg+0x4ca/0x510 [ 695.738064][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 695.738064][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 695.738064][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 695.738064][T15233] do_fast_syscall_32+0x6b/0xd0 [ 695.738064][T15233] do_SYSENTER_32+0x73/0x90 [ 695.738064][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 695.738064][T15233] [ 695.738064][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 695.738064][T15233] do_recvmmsg+0xc5/0x1ee0 [ 695.738064][T15233] do_recvmmsg+0xc5/0x1ee0 [ 696.578589][T15233] not chained 400000 origins [ 696.583212][T15233] CPU: 0 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 696.587945][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.587945][T15233] Call Trace: [ 696.587945][T15233] dump_stack+0x1df/0x240 [ 696.587945][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 696.587945][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 696.587945][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 696.587945][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 696.587945][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 696.587945][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 696.587945][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 696.587945][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 696.587945][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 696.587945][T15233] ? _copy_from_user+0x15b/0x260 [ 696.587945][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 696.587945][T15233] __msan_chain_origin+0x50/0x90 [ 696.587945][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.587945][T15233] get_compat_msghdr+0x108/0x270 [ 696.587945][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 696.688052][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 696.688052][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 696.688052][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 696.688052][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 696.688052][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 696.688052][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] RIP: 0023:0xf7f39549 [ 696.688052][T15233] Code: Bad RIP value. [ 696.688052][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 696.688052][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 696.688052][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.688052][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 696.688052][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 696.688052][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.688052][T15233] Uninit was stored to memory at: [ 696.688052][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 696.688052][T15233] __msan_chain_origin+0x50/0x90 [ 696.688052][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.688052][T15233] get_compat_msghdr+0x108/0x270 [ 696.688052][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] [ 696.688052][T15233] Uninit was stored to memory at: [ 696.688052][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 696.688052][T15233] __msan_chain_origin+0x50/0x90 [ 696.688052][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.688052][T15233] get_compat_msghdr+0x108/0x270 [ 696.688052][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] [ 696.688052][T15233] Uninit was stored to memory at: [ 696.688052][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 696.688052][T15233] __msan_chain_origin+0x50/0x90 [ 696.688052][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.688052][T15233] get_compat_msghdr+0x108/0x270 [ 696.688052][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] [ 696.688052][T15233] Uninit was stored to memory at: [ 696.688052][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 696.688052][T15233] __msan_chain_origin+0x50/0x90 [ 696.688052][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.688052][T15233] get_compat_msghdr+0x108/0x270 [ 696.688052][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] [ 696.688052][T15233] Uninit was stored to memory at: [ 696.688052][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 696.688052][T15233] __msan_chain_origin+0x50/0x90 [ 696.688052][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.688052][T15233] get_compat_msghdr+0x108/0x270 [ 696.688052][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] [ 696.688052][T15233] Uninit was stored to memory at: [ 696.688052][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 696.688052][T15233] __msan_chain_origin+0x50/0x90 [ 696.688052][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.688052][T15233] get_compat_msghdr+0x108/0x270 [ 696.688052][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] [ 696.688052][T15233] Uninit was stored to memory at: [ 696.688052][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 696.688052][T15233] __msan_chain_origin+0x50/0x90 [ 696.688052][T15233] __get_compat_msghdr+0x5be/0x890 [ 696.688052][T15233] get_compat_msghdr+0x108/0x270 [ 696.688052][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 696.688052][T15233] __sys_recvmmsg+0x4ca/0x510 [ 696.688052][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 696.688052][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 696.688052][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 696.688052][T15233] do_fast_syscall_32+0x6b/0xd0 [ 696.688052][T15233] do_SYSENTER_32+0x73/0x90 [ 696.688052][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 696.688052][T15233] [ 696.688052][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 696.688052][T15233] do_recvmmsg+0xc5/0x1ee0 [ 696.688052][T15233] do_recvmmsg+0xc5/0x1ee0 [ 697.571959][T15233] not chained 410000 origins [ 697.576698][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 697.577970][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.577970][T15233] Call Trace: [ 697.577970][T15233] dump_stack+0x1df/0x240 [ 697.577970][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 697.577970][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 697.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 697.577970][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 697.577970][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 697.577970][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 697.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 697.577970][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 697.577970][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 697.577970][T15233] ? _copy_from_user+0x15b/0x260 [ 697.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 697.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 697.577970][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 697.577970][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 697.577970][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 697.577970][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 697.577970][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] RIP: 0023:0xf7f39549 [ 697.577970][T15233] Code: Bad RIP value. [ 697.577970][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 697.577970][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 697.577970][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.577970][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 697.577970][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 697.577970][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.577970][T15233] Uninit was stored to memory at: [ 697.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] [ 697.577970][T15233] Uninit was stored to memory at: [ 697.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] [ 697.577970][T15233] Uninit was stored to memory at: [ 697.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] [ 697.577970][T15233] Uninit was stored to memory at: [ 697.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] [ 697.577970][T15233] Uninit was stored to memory at: [ 697.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] [ 697.577970][T15233] Uninit was stored to memory at: [ 697.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] [ 697.577970][T15233] Uninit was stored to memory at: [ 697.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 697.577970][T15233] __msan_chain_origin+0x50/0x90 [ 697.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 697.577970][T15233] get_compat_msghdr+0x108/0x270 [ 697.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 697.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 697.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 697.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 697.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 697.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 697.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 697.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 697.577970][T15233] [ 697.577970][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 697.577970][T15233] do_recvmmsg+0xc5/0x1ee0 [ 697.577970][T15233] do_recvmmsg+0xc5/0x1ee0 [ 698.570405][T15233] not chained 420000 origins [ 698.575027][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 698.577970][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.577970][T15233] Call Trace: [ 698.577970][T15233] dump_stack+0x1df/0x240 [ 698.577970][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 698.577970][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 698.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 698.577970][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 698.577970][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 698.577970][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 698.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 698.577970][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 698.577970][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 698.577970][T15233] ? _copy_from_user+0x15b/0x260 [ 698.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 698.577970][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 698.577970][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 698.577970][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 698.577970][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 698.577970][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 698.577970][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] RIP: 0023:0xf7f39549 [ 698.577970][T15233] Code: Bad RIP value. [ 698.577970][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 698.577970][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 698.577970][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.577970][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.577970][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 698.577970][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.577970][T15233] Uninit was stored to memory at: [ 698.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] [ 698.577970][T15233] Uninit was stored to memory at: [ 698.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] [ 698.577970][T15233] Uninit was stored to memory at: [ 698.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] [ 698.577970][T15233] Uninit was stored to memory at: [ 698.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] [ 698.577970][T15233] Uninit was stored to memory at: [ 698.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] [ 698.577970][T15233] Uninit was stored to memory at: [ 698.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] [ 698.577970][T15233] Uninit was stored to memory at: [ 698.577970][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 698.577970][T15233] __msan_chain_origin+0x50/0x90 [ 698.577970][T15233] __get_compat_msghdr+0x5be/0x890 [ 698.577970][T15233] get_compat_msghdr+0x108/0x270 [ 698.577970][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 698.577970][T15233] __sys_recvmmsg+0x4ca/0x510 [ 698.577970][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 698.577970][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 698.577970][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 698.577970][T15233] do_fast_syscall_32+0x6b/0xd0 [ 698.577970][T15233] do_SYSENTER_32+0x73/0x90 [ 698.577970][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 698.577970][T15233] [ 698.577970][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 698.577970][T15233] do_recvmmsg+0xc5/0x1ee0 [ 698.577970][T15233] do_recvmmsg+0xc5/0x1ee0 [ 699.536961][T15233] not chained 430000 origins [ 699.537972][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 699.537972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.537972][T15233] Call Trace: [ 699.537972][T15233] dump_stack+0x1df/0x240 [ 699.537972][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 699.537972][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 699.537972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 699.537972][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 699.537972][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 699.537972][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 699.537972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 699.537972][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 699.537972][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 699.537972][T15233] ? _copy_from_user+0x15b/0x260 [ 699.537972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 699.537972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 699.537972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 699.537972][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 699.537972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 699.537972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 699.537972][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] RIP: 0023:0xf7f39549 [ 699.537972][T15233] Code: Bad RIP value. [ 699.537972][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 699.537972][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 699.537972][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.537972][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.537972][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 699.537972][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.537972][T15233] Uninit was stored to memory at: [ 699.537972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] [ 699.537972][T15233] Uninit was stored to memory at: [ 699.537972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] [ 699.537972][T15233] Uninit was stored to memory at: [ 699.537972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] [ 699.537972][T15233] Uninit was stored to memory at: [ 699.537972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] [ 699.537972][T15233] Uninit was stored to memory at: [ 699.537972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] [ 699.537972][T15233] Uninit was stored to memory at: [ 699.537972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] [ 699.537972][T15233] Uninit was stored to memory at: [ 699.537972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 699.537972][T15233] __msan_chain_origin+0x50/0x90 [ 699.537972][T15233] __get_compat_msghdr+0x5be/0x890 [ 699.537972][T15233] get_compat_msghdr+0x108/0x270 [ 699.537972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 699.537972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 699.537972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 699.537972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 699.537972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 699.537972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 699.537972][T15233] do_SYSENTER_32+0x73/0x90 [ 699.537972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 699.537972][T15233] [ 699.537972][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 699.537972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 699.537972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 700.523623][T15233] not chained 440000 origins [ 700.527972][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 700.527972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.527972][T15233] Call Trace: [ 700.527972][T15233] dump_stack+0x1df/0x240 [ 700.527972][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 700.527972][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 700.527972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 700.527972][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 700.527972][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 700.527972][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 700.527972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 700.527972][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 700.527972][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 700.527972][T15233] ? _copy_from_user+0x15b/0x260 [ 700.527972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 700.527972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 700.527972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 700.527972][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 700.527972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 700.527972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 700.527972][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] RIP: 0023:0xf7f39549 [ 700.527972][T15233] Code: Bad RIP value. [ 700.527972][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 700.527972][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 700.527972][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.527972][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.527972][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 700.527972][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.527972][T15233] Uninit was stored to memory at: [ 700.527972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] [ 700.527972][T15233] Uninit was stored to memory at: [ 700.527972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] [ 700.527972][T15233] Uninit was stored to memory at: [ 700.527972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] [ 700.527972][T15233] Uninit was stored to memory at: [ 700.527972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] [ 700.527972][T15233] Uninit was stored to memory at: [ 700.527972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] [ 700.527972][T15233] Uninit was stored to memory at: [ 700.527972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] [ 700.527972][T15233] Uninit was stored to memory at: [ 700.527972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 700.527972][T15233] __msan_chain_origin+0x50/0x90 [ 700.527972][T15233] __get_compat_msghdr+0x5be/0x890 [ 700.527972][T15233] get_compat_msghdr+0x108/0x270 [ 700.527972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 700.527972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 700.527972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 700.527972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 700.527972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 700.527972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 700.527972][T15233] do_SYSENTER_32+0x73/0x90 [ 700.527972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 700.527972][T15233] [ 700.527972][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 700.527972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 700.527972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 701.507558][T15233] not chained 450000 origins [ 701.507964][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 701.507964][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.507964][T15233] Call Trace: [ 701.507964][T15233] dump_stack+0x1df/0x240 [ 701.507964][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 701.507964][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 701.507964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 701.507964][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 701.507964][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 701.507964][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 701.507964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 701.507964][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 701.507964][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 701.507964][T15233] ? _copy_from_user+0x15b/0x260 [ 701.507964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 701.507964][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 701.507964][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 701.507964][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 701.507964][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 701.507964][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 701.507964][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] RIP: 0023:0xf7f39549 [ 701.507964][T15233] Code: Bad RIP value. [ 701.507964][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 701.507964][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 701.507964][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.507964][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.507964][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 701.507964][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.507964][T15233] Uninit was stored to memory at: [ 701.507964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] [ 701.507964][T15233] Uninit was stored to memory at: [ 701.507964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] [ 701.507964][T15233] Uninit was stored to memory at: [ 701.507964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] [ 701.507964][T15233] Uninit was stored to memory at: [ 701.507964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] [ 701.507964][T15233] Uninit was stored to memory at: [ 701.507964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] [ 701.507964][T15233] Uninit was stored to memory at: [ 701.507964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] [ 701.507964][T15233] Uninit was stored to memory at: [ 701.507964][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 701.507964][T15233] __msan_chain_origin+0x50/0x90 [ 701.507964][T15233] __get_compat_msghdr+0x5be/0x890 [ 701.507964][T15233] get_compat_msghdr+0x108/0x270 [ 701.507964][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 701.507964][T15233] __sys_recvmmsg+0x4ca/0x510 [ 701.507964][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 701.507964][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 701.507964][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 701.507964][T15233] do_fast_syscall_32+0x6b/0xd0 [ 701.507964][T15233] do_SYSENTER_32+0x73/0x90 [ 701.507964][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 701.507964][T15233] [ 701.507964][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 701.507964][T15233] do_recvmmsg+0xc5/0x1ee0 [ 701.507964][T15233] do_recvmmsg+0xc5/0x1ee0 [ 702.446114][T15233] not chained 460000 origins [ 702.447979][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 702.447979][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.447979][T15233] Call Trace: [ 702.447979][T15233] dump_stack+0x1df/0x240 [ 702.447979][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 702.447979][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 702.447979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 702.447979][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 702.447979][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 702.447979][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 702.447979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 702.447979][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 702.447979][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 702.447979][T15233] ? _copy_from_user+0x15b/0x260 [ 702.447979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 702.447979][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 702.447979][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 702.447979][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 702.447979][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 702.447979][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 702.447979][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] RIP: 0023:0xf7f39549 [ 702.447979][T15233] Code: Bad RIP value. [ 702.447979][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 702.447979][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 702.447979][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 702.447979][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 702.447979][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 702.447979][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.447979][T15233] Uninit was stored to memory at: [ 702.447979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] [ 702.447979][T15233] Uninit was stored to memory at: [ 702.447979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] [ 702.447979][T15233] Uninit was stored to memory at: [ 702.447979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] [ 702.447979][T15233] Uninit was stored to memory at: [ 702.447979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] [ 702.447979][T15233] Uninit was stored to memory at: [ 702.447979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] [ 702.447979][T15233] Uninit was stored to memory at: [ 702.447979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] [ 702.447979][T15233] Uninit was stored to memory at: [ 702.447979][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 702.447979][T15233] __msan_chain_origin+0x50/0x90 [ 702.447979][T15233] __get_compat_msghdr+0x5be/0x890 [ 702.447979][T15233] get_compat_msghdr+0x108/0x270 [ 702.447979][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 702.447979][T15233] __sys_recvmmsg+0x4ca/0x510 [ 702.447979][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 702.447979][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 702.447979][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 702.447979][T15233] do_fast_syscall_32+0x6b/0xd0 [ 702.447979][T15233] do_SYSENTER_32+0x73/0x90 [ 702.447979][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 702.447979][T15233] [ 702.447979][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 702.447979][T15233] do_recvmmsg+0xc5/0x1ee0 [ 702.447979][T15233] do_recvmmsg+0xc5/0x1ee0 [ 703.442344][T15233] not chained 470000 origins [ 703.446981][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 703.447978][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.447978][T15233] Call Trace: [ 703.447978][T15233] dump_stack+0x1df/0x240 [ 703.447978][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 703.447978][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 703.447978][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 703.447978][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 703.447978][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 703.447978][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 703.447978][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 703.447978][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 703.447978][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 703.447978][T15233] ? _copy_from_user+0x15b/0x260 [ 703.447978][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 703.447978][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 703.447978][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 703.447978][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 703.447978][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 703.447978][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 703.447978][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] RIP: 0023:0xf7f39549 [ 703.447978][T15233] Code: Bad RIP value. [ 703.447978][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 703.447978][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 703.447978][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 703.447978][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 703.447978][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 703.447978][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 703.447978][T15233] Uninit was stored to memory at: [ 703.447978][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] [ 703.447978][T15233] Uninit was stored to memory at: [ 703.447978][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] [ 703.447978][T15233] Uninit was stored to memory at: [ 703.447978][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] [ 703.447978][T15233] Uninit was stored to memory at: [ 703.447978][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] [ 703.447978][T15233] Uninit was stored to memory at: [ 703.447978][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] [ 703.447978][T15233] Uninit was stored to memory at: [ 703.447978][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] [ 703.447978][T15233] Uninit was stored to memory at: [ 703.447978][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 703.447978][T15233] __msan_chain_origin+0x50/0x90 [ 703.447978][T15233] __get_compat_msghdr+0x5be/0x890 [ 703.447978][T15233] get_compat_msghdr+0x108/0x270 [ 703.447978][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 703.447978][T15233] __sys_recvmmsg+0x4ca/0x510 [ 703.447978][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 703.447978][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 703.447978][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 703.447978][T15233] do_fast_syscall_32+0x6b/0xd0 [ 703.447978][T15233] do_SYSENTER_32+0x73/0x90 [ 703.447978][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 703.447978][T15233] [ 703.447978][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 703.447978][T15233] do_recvmmsg+0xc5/0x1ee0 [ 703.447978][T15233] do_recvmmsg+0xc5/0x1ee0 [ 704.444319][T15233] not chained 480000 origins [ 704.447985][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 704.447985][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.447985][T15233] Call Trace: [ 704.447985][T15233] dump_stack+0x1df/0x240 [ 704.447985][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 704.447985][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 704.447985][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 704.447985][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 704.447985][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 704.447985][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 704.447985][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 704.447985][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 704.447985][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 704.447985][T15233] ? _copy_from_user+0x15b/0x260 [ 704.447985][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 704.447985][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 704.447985][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 704.447985][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 704.447985][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 704.447985][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 704.447985][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] RIP: 0023:0xf7f39549 [ 704.447985][T15233] Code: Bad RIP value. [ 704.447985][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 704.447985][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 704.447985][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.447985][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.447985][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 704.447985][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.447985][T15233] Uninit was stored to memory at: [ 704.447985][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] [ 704.447985][T15233] Uninit was stored to memory at: [ 704.447985][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] [ 704.447985][T15233] Uninit was stored to memory at: [ 704.447985][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] [ 704.447985][T15233] Uninit was stored to memory at: [ 704.447985][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] [ 704.447985][T15233] Uninit was stored to memory at: [ 704.447985][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] [ 704.447985][T15233] Uninit was stored to memory at: [ 704.447985][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] [ 704.447985][T15233] Uninit was stored to memory at: [ 704.447985][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 704.447985][T15233] __msan_chain_origin+0x50/0x90 [ 704.447985][T15233] __get_compat_msghdr+0x5be/0x890 [ 704.447985][T15233] get_compat_msghdr+0x108/0x270 [ 704.447985][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 704.447985][T15233] __sys_recvmmsg+0x4ca/0x510 [ 704.447985][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 704.447985][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 704.447985][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 704.447985][T15233] do_fast_syscall_32+0x6b/0xd0 [ 704.447985][T15233] do_SYSENTER_32+0x73/0x90 [ 704.447985][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 704.447985][T15233] [ 704.447985][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 704.447985][T15233] do_recvmmsg+0xc5/0x1ee0 [ 704.447985][T15233] do_recvmmsg+0xc5/0x1ee0 [ 705.437338][T15233] not chained 490000 origins [ 705.437965][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 705.437965][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.437965][T15233] Call Trace: [ 705.437965][T15233] dump_stack+0x1df/0x240 [ 705.437965][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 705.437965][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 705.437965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 705.437965][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 705.437965][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 705.437965][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 705.437965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 705.437965][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 705.437965][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 705.437965][T15233] ? _copy_from_user+0x15b/0x260 [ 705.437965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 705.437965][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 705.437965][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 705.437965][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 705.437965][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 705.437965][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 705.437965][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] RIP: 0023:0xf7f39549 [ 705.437965][T15233] Code: Bad RIP value. [ 705.437965][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 705.437965][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 705.437965][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 705.437965][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 705.437965][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 705.437965][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.437965][T15233] Uninit was stored to memory at: [ 705.437965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] [ 705.437965][T15233] Uninit was stored to memory at: [ 705.437965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] [ 705.437965][T15233] Uninit was stored to memory at: [ 705.437965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] [ 705.437965][T15233] Uninit was stored to memory at: [ 705.437965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] [ 705.437965][T15233] Uninit was stored to memory at: [ 705.437965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] [ 705.437965][T15233] Uninit was stored to memory at: [ 705.437965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] [ 705.437965][T15233] Uninit was stored to memory at: [ 705.437965][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 705.437965][T15233] __msan_chain_origin+0x50/0x90 [ 705.437965][T15233] __get_compat_msghdr+0x5be/0x890 [ 705.437965][T15233] get_compat_msghdr+0x108/0x270 [ 705.437965][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 705.437965][T15233] __sys_recvmmsg+0x4ca/0x510 [ 705.437965][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 705.437965][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 705.437965][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 705.437965][T15233] do_fast_syscall_32+0x6b/0xd0 [ 705.437965][T15233] do_SYSENTER_32+0x73/0x90 [ 705.437965][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 705.437965][T15233] [ 705.437965][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 705.437965][T15233] do_recvmmsg+0xc5/0x1ee0 [ 705.437965][T15233] do_recvmmsg+0xc5/0x1ee0 [ 706.436103][T15233] not chained 500000 origins [ 706.437967][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 706.437967][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.437967][T15233] Call Trace: [ 706.437967][T15233] dump_stack+0x1df/0x240 [ 706.437967][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 706.437967][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 706.437967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 706.437967][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 706.437967][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 706.437967][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 706.437967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 706.437967][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 706.437967][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 706.437967][T15233] ? _copy_from_user+0x15b/0x260 [ 706.437967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 706.437967][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 706.437967][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 706.437967][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 706.437967][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 706.437967][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 706.437967][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] RIP: 0023:0xf7f39549 [ 706.437967][T15233] Code: Bad RIP value. [ 706.437967][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 706.437967][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 706.437967][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.437967][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.437967][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 706.437967][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.437967][T15233] Uninit was stored to memory at: [ 706.437967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] [ 706.437967][T15233] Uninit was stored to memory at: [ 706.437967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] [ 706.437967][T15233] Uninit was stored to memory at: [ 706.437967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] [ 706.437967][T15233] Uninit was stored to memory at: [ 706.437967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] [ 706.437967][T15233] Uninit was stored to memory at: [ 706.437967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] [ 706.437967][T15233] Uninit was stored to memory at: [ 706.437967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] [ 706.437967][T15233] Uninit was stored to memory at: [ 706.437967][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 706.437967][T15233] __msan_chain_origin+0x50/0x90 [ 706.437967][T15233] __get_compat_msghdr+0x5be/0x890 [ 706.437967][T15233] get_compat_msghdr+0x108/0x270 [ 706.437967][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 706.437967][T15233] __sys_recvmmsg+0x4ca/0x510 [ 706.437967][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 706.437967][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 706.437967][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 706.437967][T15233] do_fast_syscall_32+0x6b/0xd0 [ 706.437967][T15233] do_SYSENTER_32+0x73/0x90 [ 706.437967][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 706.437967][T15233] [ 706.437967][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 706.437967][T15233] do_recvmmsg+0xc5/0x1ee0 [ 706.437967][T15233] do_recvmmsg+0xc5/0x1ee0 [ 707.404802][T15233] not chained 510000 origins [ 707.408046][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 707.408046][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.408046][T15233] Call Trace: [ 707.408046][T15233] dump_stack+0x1df/0x240 [ 707.408046][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 707.408046][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 707.408046][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 707.408046][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 707.408046][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 707.408046][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 707.408046][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 707.408046][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 707.408046][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 707.408046][T15233] ? _copy_from_user+0x15b/0x260 [ 707.408046][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 707.408046][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 707.408046][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 707.408046][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 707.408046][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 707.408046][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 707.408046][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] RIP: 0023:0xf7f39549 [ 707.408046][T15233] Code: Bad RIP value. [ 707.408046][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 707.408046][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 707.408046][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.408046][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.408046][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 707.408046][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.408046][T15233] Uninit was stored to memory at: [ 707.408046][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] [ 707.408046][T15233] Uninit was stored to memory at: [ 707.408046][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] [ 707.408046][T15233] Uninit was stored to memory at: [ 707.408046][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] [ 707.408046][T15233] Uninit was stored to memory at: [ 707.408046][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] [ 707.408046][T15233] Uninit was stored to memory at: [ 707.408046][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] [ 707.408046][T15233] Uninit was stored to memory at: [ 707.408046][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] [ 707.408046][T15233] Uninit was stored to memory at: [ 707.408046][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 707.408046][T15233] __msan_chain_origin+0x50/0x90 [ 707.408046][T15233] __get_compat_msghdr+0x5be/0x890 [ 707.408046][T15233] get_compat_msghdr+0x108/0x270 [ 707.408046][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 707.408046][T15233] __sys_recvmmsg+0x4ca/0x510 [ 707.408046][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 707.408046][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 707.408046][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 707.408046][T15233] do_fast_syscall_32+0x6b/0xd0 [ 707.408046][T15233] do_SYSENTER_32+0x73/0x90 [ 707.408046][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.408046][T15233] [ 707.408046][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 707.408046][T15233] do_recvmmsg+0xc5/0x1ee0 [ 707.408046][T15233] do_recvmmsg+0xc5/0x1ee0 [ 708.411134][T15233] not chained 520000 origins [ 708.415762][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 708.417972][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.417972][T15233] Call Trace: [ 708.417972][T15233] dump_stack+0x1df/0x240 [ 708.417972][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 708.417972][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 708.417972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 708.417972][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 708.417972][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 708.417972][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 708.417972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 708.417972][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 708.417972][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 708.417972][T15233] ? _copy_from_user+0x15b/0x260 [ 708.417972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 708.417972][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 708.417972][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 708.417972][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 708.417972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 708.417972][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 708.417972][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] RIP: 0023:0xf7f39549 [ 708.417972][T15233] Code: Bad RIP value. [ 708.417972][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 708.417972][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 708.417972][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.417972][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.417972][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 708.417972][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.417972][T15233] Uninit was stored to memory at: [ 708.417972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] [ 708.417972][T15233] Uninit was stored to memory at: [ 708.417972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] [ 708.417972][T15233] Uninit was stored to memory at: [ 708.417972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] [ 708.417972][T15233] Uninit was stored to memory at: [ 708.417972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] [ 708.417972][T15233] Uninit was stored to memory at: [ 708.417972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] [ 708.417972][T15233] Uninit was stored to memory at: [ 708.417972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] [ 708.417972][T15233] Uninit was stored to memory at: [ 708.417972][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 708.417972][T15233] __msan_chain_origin+0x50/0x90 [ 708.417972][T15233] __get_compat_msghdr+0x5be/0x890 [ 708.417972][T15233] get_compat_msghdr+0x108/0x270 [ 708.417972][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 708.417972][T15233] __sys_recvmmsg+0x4ca/0x510 [ 708.417972][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 708.417972][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 708.417972][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 708.417972][T15233] do_fast_syscall_32+0x6b/0xd0 [ 708.417972][T15233] do_SYSENTER_32+0x73/0x90 [ 708.417972][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 708.417972][T15233] [ 708.417972][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 708.417972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 708.417972][T15233] do_recvmmsg+0xc5/0x1ee0 [ 709.364668][T15233] not chained 530000 origins [ 709.367976][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 709.367976][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.367976][T15233] Call Trace: [ 709.367976][T15233] dump_stack+0x1df/0x240 [ 709.367976][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 709.367976][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 709.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 709.367976][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 709.367976][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 709.367976][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 709.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 709.367976][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 709.367976][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 709.367976][T15233] ? _copy_from_user+0x15b/0x260 [ 709.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 709.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 709.367976][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 709.367976][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 709.367976][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 709.367976][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 709.367976][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] RIP: 0023:0xf7f39549 [ 709.367976][T15233] Code: Bad RIP value. [ 709.367976][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 709.367976][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 709.367976][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.367976][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.367976][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 709.367976][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.367976][T15233] Uninit was stored to memory at: [ 709.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] [ 709.367976][T15233] Uninit was stored to memory at: [ 709.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] [ 709.367976][T15233] Uninit was stored to memory at: [ 709.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] [ 709.367976][T15233] Uninit was stored to memory at: [ 709.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] [ 709.367976][T15233] Uninit was stored to memory at: [ 709.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] [ 709.367976][T15233] Uninit was stored to memory at: [ 709.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] [ 709.367976][T15233] Uninit was stored to memory at: [ 709.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 709.367976][T15233] __msan_chain_origin+0x50/0x90 [ 709.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 709.367976][T15233] get_compat_msghdr+0x108/0x270 [ 709.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 709.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 709.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 709.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 709.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 709.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 709.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 709.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 709.367976][T15233] [ 709.367976][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 709.367976][T15233] do_recvmmsg+0xc5/0x1ee0 [ 709.367976][T15233] do_recvmmsg+0xc5/0x1ee0 [ 710.366142][T15233] not chained 540000 origins [ 710.367976][T15233] CPU: 1 PID: 15233 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 710.367976][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.367976][T15233] Call Trace: [ 710.367976][T15233] dump_stack+0x1df/0x240 [ 710.367976][T15233] kmsan_internal_chain_origin+0x6f/0x130 [ 710.367976][T15233] ? skb_recv_datagram+0x3ec/0x480 [ 710.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 710.367976][T15233] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 710.367976][T15233] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 710.367976][T15233] ? bt_sock_recvmsg+0x564/0xa00 [ 710.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 710.367976][T15233] ? kmsan_set_origin_checked+0x95/0xf0 [ 710.367976][T15233] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 710.367976][T15233] ? _copy_from_user+0x15b/0x260 [ 710.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 710.367976][T15233] ? kmsan_get_metadata+0x4f/0x180 [ 710.367976][T15233] ? kmsan_internal_set_origin+0x75/0xb0 [ 710.367976][T15233] ? __msan_poison_alloca+0xf0/0x120 [ 710.367976][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 710.367976][T15233] ? __sys_recvmmsg+0xb4/0x510 [ 710.367976][T15233] ? kmsan_get_metadata+0x11d/0x180 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] RIP: 0023:0xf7f39549 [ 710.367976][T15233] Code: Bad RIP value. [ 710.367976][T15233] RSP: 002b:00000000f5d340cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 710.367976][T15233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 710.367976][T15233] RDX: 0000000004000223 RSI: 0000000000000000 RDI: 0000000000000000 [ 710.367976][T15233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 710.367976][T15233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 710.367976][T15233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 710.367976][T15233] Uninit was stored to memory at: [ 710.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] [ 710.367976][T15233] Uninit was stored to memory at: [ 710.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] [ 710.367976][T15233] Uninit was stored to memory at: [ 710.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] [ 710.367976][T15233] Uninit was stored to memory at: [ 710.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] [ 710.367976][T15233] Uninit was stored to memory at: [ 710.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] [ 710.367976][T15233] Uninit was stored to memory at: [ 710.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] [ 710.367976][T15233] Uninit was stored to memory at: [ 710.367976][T15233] kmsan_internal_chain_origin+0xad/0x130 [ 710.367976][T15233] __msan_chain_origin+0x50/0x90 [ 710.367976][T15233] __get_compat_msghdr+0x5be/0x890 [ 710.367976][T15233] get_compat_msghdr+0x108/0x270 [ 710.367976][T15233] do_recvmmsg+0xa6a/0x1ee0 [ 710.367976][T15233] __sys_recvmmsg+0x4ca/0x510 [ 710.367976][T15233] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 710.367976][T15233] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 710.367976][T15233] __do_fast_syscall_32+0x2aa/0x400 [ 710.367976][T15233] do_fast_syscall_32+0x6b/0xd0 [ 710.367976][T15233] do_SYSENTER_32+0x73/0x90 [ 710.367976][T15233] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 710.367976][T15233] [ 710.367976][T15233] Local variable ----msg_sys@do_recvmmsg created at: [ 710.367976][T15233] do_recvmmsg+0xc5/0x1ee0 [ 710.367976][T15233] do_recvmmsg+0xc5/0x1ee0 14:00:40 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 14:00:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="5500000019007f9837c0f2b2a4a280930a0000100002430ef49e1a6939000900100000000000000008000500000021df000000000004d5440a009b84136ef7470500de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4bd, 0x0) 14:00:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') sendfile(r0, r1, 0x0, 0x320f) 14:00:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 14:00:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) [ 711.699759][T10863] Bluetooth: hci0: Frame reassembly failed (-84) [ 711.724159][T15306] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 14:00:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:00:41 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 14:00:41 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 14:00:42 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 14:00:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:00:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2", 0xca}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0xd60}], 0x6}, 0x0) 14:00:42 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xffd1) 14:00:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) [ 713.731155][T10545] Bluetooth: hci0: command 0x1003 tx timeout [ 713.738267][T14820] Bluetooth: hci0: sending frame failed (-49) 14:00:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 14:00:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/177, 0xb1}, {0x0}, {0x0}], 0x3}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) flock(r3, 0x40000003) shutdown(r2, 0x0) [ 715.825246][ T31] Bluetooth: hci0: command 0x1001 tx timeout [ 715.831748][T14820] Bluetooth: hci0: sending frame failed (-49) [ 717.888466][ T31] Bluetooth: hci0: command 0x1009 tx timeout 14:00:51 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000001040)=0x31) 14:00:51 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xffd1) 14:00:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:51 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000100)=@un=@file={0xa}, 0xa, 0x0}, 0x0) 14:00:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:00:51 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 14:00:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:51 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xffd1) 14:00:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:00:52 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000001040)=0x31) 14:00:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000004c0)="b7", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000008400000007"], 0x2c}, 0x0) 14:00:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:53 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:00:53 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000001040)=0x31) 14:00:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2", 0xca}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f00000004c0)="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", 0x39a}], 0x5}, 0x0) 14:00:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:53 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 14:00:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 14:00:53 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:00:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2", 0xca}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0x3c6}], 0x5}, 0x0) 14:00:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:54 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:00:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000008400000007"], 0x2c}, 0x0) 14:00:54 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x180, 0x0, 0x0) dup2(r1, r0) 14:00:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}], 0x4) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:00:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x8) 14:00:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:00:55 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 14:00:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa1c9987b8eed37d007d572e194d8e6c52735f7ed4cde5441fb726198426a07ca539765aed78f1895773efc9475243994950660cd31887bdf9fa492e14f38ddd4c90d621dc83bd6922a1a17af93ff52d6967f857656114f50a004ee3e7922555f4da9bcc94", 0x6b}, {&(0x7f0000001680)="d5", 0x1}, {0x0}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f", 0x3d}], 0x4}, 0x0) 14:00:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa1c9987b8eed37d007d572e194d8e6c52735f7ed4cde5441fb726198426a07ca539765aed78f1895773efc9475243994950660cd31887bdf9fa492e14f38ddd4c90d621dc83bd6922a1a17af93ff52d6967f857656114f50a004ee3e7922555f4da9bcc942219778adab92da4a48fa5f9ae1a897652dc62d3075996331b41828d5b3fc944493c6e7e13924c07f0d1648358f0207be8b468f347b459019298b9ff66546500bfeffdf2eed2d67debd53976c36758e39c18252ff2a52f73bedff00954540b27ffdbfbf925159dfb3e8354c3f900b8939795f32fdf70dc743ff72b1f", 0xe7}, {&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2", 0xca}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0xd8d}], 0x7}, 0x0) 14:00:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) recvfrom$inet(r3, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 14:00:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa1c9987b8eed37d007d572e194d8e6c52735f7ed4cde5441fb726198426a07ca539765aed78f1895773efc9475243994950660cd31887bdf9fa492e14f38ddd4c90d621dc83bd6922a1a17af93ff52d6967f857656114f50a004ee3e7922555f4da9bcc942219778adab92da4a48fa5f9ae1a897652dc62d3075996331b41828d5b3fc944493c6e7e13924c07f0d1648358f0207be8b468f347b459019298b9ff66546500bfeffdf2eed2d67debd53976c36758e39c18252ff2a52f73bedff00954540b27ffdbfbf925159dfb3e8354c3f900b8939795f32fdf70dc743ff72b1f", 0xe7}, {&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2", 0xca}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0xd89}], 0x7}, 0x0) 14:00:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/177, 0xb1}, {0x0}, {0x0}], 0x3}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) flock(r3, 0x40000003) shutdown(r2, 0x0) 14:00:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)='/', 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) 14:00:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:57 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0xc2002, 0x0) write$dsp(r0, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) 14:00:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001680)="d5", 0x1}], 0x1}, 0x0) 14:00:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa", 0x7}, {&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e294", 0x2}, {&(0x7f0000000340)="9a80d714c488942fbf39", 0xa}, {&(0x7f0000000240)='3', 0x1}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}], 0x6}, 0x0) 14:00:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:00:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:00:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r0) 14:00:59 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000040), 0x4) 14:00:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x32, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB=' '], 0x8) 14:00:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:00:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa1c9987b8eed37d007d572e194d8e6c52735f7ed4cde5441fb726198426a07ca539765aed78f1895773efc9475243994950660cd31887bdf9fa492e14f38ddd4c90d621dc83bd6922a1a17af93ff52d6967f857656114f50a004ee3e7922555f4da9bcc942219778adab92da4a48fa5f9ae1a897652dc62d3075996331b41828d5b3fc944493c6e7e13924c07f0d1648358f0207be8b468f347b459019298b9ff66546500bfeffdf2eed2d67debd53976c36758e39c18252ff2a52f73bedff00954540b27ffdbfbf925159dfb3e8354c3f900b8939795f32fdf70dc743ff72b1f", 0xe7}, {&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e29449b75243a5c9fb", 0x9}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2", 0xca}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0xd81}], 0x7}, 0x0) 14:00:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 14:01:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/177, 0xb1}, {0x0}], 0x2}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) flock(r3, 0x40000003) shutdown(r2, 0x0) 14:01:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r1) dup2(r2, r0) 14:01:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/177, 0xb1}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) flock(r3, 0x40000003) shutdown(r2, 0x0) 14:01:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d094", 0xa8}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2", 0xca}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0x31e}], 0x6}, 0x0) 14:01:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x187, 0x0) 14:01:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) getsockopt$sock_int(r1, 0xffff, 0x8, 0x0, &(0x7f00000000c0)) 14:01:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:01 executing program 0: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)=0xa0) 14:01:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:01:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x187, 0x0) 14:01:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/177, 0xb1}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) flock(r3, 0x40000003) shutdown(r2, 0x0) 14:01:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/130, 0x82}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/177, 0xb1}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) flock(r3, 0x40000003) shutdown(r2, 0x0) 14:01:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa1c9987b8eed37d007d572e194d8e6c52735f7ed4cde5441fb726198426a07ca539765aed78f1895773efc9475243994950660cd31887bdf9fa492e14f38ddd4c90d621dc83bd6922a1a17af93ff52d6967f857656114f50a004ee3e7922555f4da9bcc942219778adab92da4a48fa5f9ae1a897652dc62d3075996331b41828d5b3fc944493c6e7e13924c07f0d1648358f0207be8b468f347b459019298b9ff66546500bfeffdf2eed2d67debd53976c36758e39c18252ff2a52f73bedff00954540b27ffdbfbf925159dfb3e8354c3f900b8939795f32fdf70dc743ff72b1f", 0xe7}, {&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fb", 0xc9}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0xd79}], 0x7}, 0x0) 14:01:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x187, 0x0) 14:01:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa1c9987b8eed37d007d572e194d8e6c52735f7ed4cde5441fb726198426a07ca539765aed78f1895773efc9475243994950660cd31887bdf9fa492e14f38ddd4c90d621dc83bd6922a1a17af93ff52d6967f857656114f50a004ee3e7922555f4da9bcc942219778adab92da4a48fa5f9ae1a897652dc62d3075996331b41828d5b3fc944493c6e7e13924c07f0d1648358f0207be8b468f347b459019298b9ff66546500bfeffdf2eed2d67debd53976c36758e39c18252ff2a52f73bedff00954540b27ffdbfbf925159dfb3e8354c3f900b8939795f32fdf70dc743ff72b1f", 0xe7}, {&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1d62753d460f0c17673ad040b20d14a2cf4c9a6eb5034a49804da67d1b7cbe00be7f11c658e8faed04126067cb2fa8c9549dd2f9a157b111fcb725c41eef34fb1b9e1c706f3e939f8ee3a846b3fd2da6198d0944ae3", 0xaa}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2212fc0fad362f61a44bc6261553b92204b962660d532784ac2a18328", 0xe6}, {&(0x7f0000000240)="338a5efb0e9df2fcccd5abc7e487d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec1aeb21d4ef1c890360f33652f5317c721301aa70cb77bfaf52305de6344922984c5eab1af54f1188477d90168baad82add37b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e2", 0x8d}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f3470977810e34beef6debea2019aeac31becb71e924f41ca695e417864e6280e3e947a46467c8ddd647d725ae856097e4c0668d00bbe4951066c6921e9f45889", 0x7e}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="4e94f50f28e15be8800096d91e2e7ac2e5f6dd88", 0x14}, {&(0x7f00000017c0)="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", 0x309}], 0x9}, 0x0) 14:01:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 14:01:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000080)=""/7, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 14:01:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:03 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:01:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200)={0x80, 0x0, 0x0, 0x0, 0x4}, 0xc2706221583c3268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, &(0x7f0000000000)) 14:01:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 14:01:03 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='\x00', 0x0, r5) 14:01:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 14:01:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) [ 734.922493][T10863] Bluetooth: hci0: Frame reassembly failed (-84) [ 734.944855][T15684] Bluetooth: hci0: Frame reassembly failed (-84) 14:01:04 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:01:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feecff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000de18e758a400b4862baee655"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632f77", 0x0, 0x100, 0x6000000000000000}, 0x28) 14:01:04 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0xc0001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 14:01:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) 14:01:04 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x11, 0x0, 0xee) 14:01:05 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 736.082019][ T32] audit: type=1800 audit(1595167265.262:34): pid=15709 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16371 res=0 14:01:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x123402) write(r0, &(0x7f0000000080)="3d11f11ca8d282fff2a8c6b5760f3346d6a5f62f9129a3effbd2e73424c6cafd4389bd85a6561e3a177adc4fb521e57f4ee39383d43fe8a78104ab79a03865cb34764e70e215e2df4fb7f141e3eb247005e4152977d7d6b5", 0x58) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) 14:01:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000001c0)={0x1, "4e0282fe09acecc3dbc4cd272873a777bbf8362adf4baefd744a12e70b56e7a9"}) 14:01:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x123402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000200040000009600000000000000a4000000000000000000", 0xffffffe5}], 0x2) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 736.939058][T10545] Bluetooth: hci0: command 0x1003 tx timeout [ 736.945362][T14820] Bluetooth: hci0: sending frame failed (-49) [ 739.008299][T10545] Bluetooth: hci0: command 0x1001 tx timeout [ 739.014624][T14820] Bluetooth: hci0: sending frame failed (-49) [ 741.088487][T10545] Bluetooth: hci0: command 0x1009 tx timeout 14:01:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:14 executing program 1: 14:01:14 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0xc0001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 14:01:14 executing program 2: r0 = socket(0x2, 0x10000001, 0x0) connect$unix(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="a00267"], 0x10) 14:01:14 executing program 4: 14:01:14 executing program 3: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 14:01:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 14:01:14 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504d0000000000007005586ca900f0e08fecea11ea8fef96e000000008d628b226fda15fa4f376336acf00b7804be781e4991f7c8df5f882b2b7be1aa7923ed00f4c8b2ca3eb60000000000000027acb5d602000d7d026ba8af9cff37282934e4fd89720fd3872babfbb77008f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01ba0b62351c5000000020066000000200f0200ff000000000000000000000000020000000000000000", 0xb1, 0x0, 0x0, 0x0) 14:01:15 executing program 2: 14:01:15 executing program 3: [ 745.819626][T12349] Bluetooth: hci0: Frame reassembly failed (-84) [ 745.847496][T15756] Bluetooth: hci0: Frame reassembly failed (-84) 14:01:15 executing program 1: 14:01:15 executing program 2: [ 747.888594][T10545] Bluetooth: hci0: command 0x1003 tx timeout [ 747.894941][T14820] Bluetooth: hci0: sending frame failed (-49) [ 749.968165][T10545] Bluetooth: hci0: command 0x1001 tx timeout [ 749.974458][T14820] Bluetooth: hci0: sending frame failed (-49) [ 752.048460][T10545] Bluetooth: hci0: command 0x1009 tx timeout 14:01:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000001040)=0x31) 14:01:25 executing program 3: 14:01:25 executing program 0: 14:01:25 executing program 4: 14:01:25 executing program 1: 14:01:25 executing program 2: 14:01:25 executing program 1: 14:01:25 executing program 0: 14:01:25 executing program 3: 14:01:25 executing program 4: msgrcv(0x0, 0x0, 0x0, 0xd6d0c418f59fe7d3, 0x0) msgrcv(0x0, 0x0, 0xb8, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2}}) 14:01:25 executing program 2: 14:01:26 executing program 1: 14:01:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000001040)=0x31) 14:01:26 executing program 3: 14:01:26 executing program 0: 14:01:26 executing program 4: 14:01:26 executing program 2: 14:01:26 executing program 1: [ 757.446517][T12263] Bluetooth: hci0: Frame reassembly failed (-84) 14:01:26 executing program 3: 14:01:26 executing program 4: 14:01:27 executing program 0: 14:01:27 executing program 2: 14:01:27 executing program 1: 14:01:27 executing program 3: [ 759.495089][ T31] Bluetooth: hci0: command 0x1003 tx timeout [ 759.501745][T14820] Bluetooth: hci0: sending frame failed (-49) [ 761.568256][ T31] Bluetooth: hci0: command 0x1001 tx timeout [ 761.574584][T14820] Bluetooth: hci0: sending frame failed (-49) [ 762.233316][ T1] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT [ 762.271641][ T1] systemd[1]: systemd-journald.service: Unit entered failed state. [ 762.291202][ T1] systemd[1]: systemd-journald.service: Failed with result 'watchdog'. [ 762.305177][ T1] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 762.330215][ T1] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 762.337823][ T1] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 762.345704][ T1] systemd[1]: Stopped Journal Service. [ 762.380234][ T1] systemd[1]: Starting Journal Service... [ 762.658346][T15826] systemd-journald[15826]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 763.648268][ T31] Bluetooth: hci0: command 0x1009 tx timeout [ 767.009083][ T0] NOHZ: local_softirq_pending 08 14:01:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000001040)=0x31) 14:01:36 executing program 4: 14:01:36 executing program 0: 14:01:36 executing program 2: 14:01:36 executing program 1: 14:01:36 executing program 3: [ 767.758477][ T1] systemd[1]: Starting Load/Save RF Kill Switch Status... 14:01:37 executing program 1: 14:01:37 executing program 2: 14:01:37 executing program 4: 14:01:37 executing program 3: 14:01:37 executing program 0: [ 768.227916][T12349] Bluetooth: hci0: Frame reassembly failed (-84) 14:01:37 executing program 2: [ 768.676439][ T1] systemd[1]: bluetooth.target: Unit not needed anymore. Stopping. [ 768.714303][ T1] systemd[1]: Stopped target Bluetooth. [ 770.016298][ T1] systemd[1]: Reached target Bluetooth. [ 770.063405][ T1] systemd[1]: Started Load/Save RF Kill Switch Status. [ 770.298187][ T31] Bluetooth: hci0: command 0x1003 tx timeout [ 770.304430][T14820] Bluetooth: hci0: sending frame failed (-49) [ 772.378223][ T31] Bluetooth: hci0: command 0x1001 tx timeout [ 772.384641][T14820] Bluetooth: hci0: sending frame failed (-49) [ 774.448303][T10545] Bluetooth: hci0: command 0x1009 tx timeout [ 775.342298][ T0] NOHZ: local_softirq_pending 08 14:01:47 executing program 1: 14:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000001040)=0x31) 14:01:47 executing program 4: 14:01:47 executing program 0: 14:01:47 executing program 3: 14:01:47 executing program 2: [ 778.672210][ T1] systemd[1]: Starting Load/Save RF Kill Switch Status... 14:01:48 executing program 3: 14:01:48 executing program 4: 14:01:48 executing program 1: 14:01:48 executing program 0: 14:01:48 executing program 2: [ 779.207749][ T1] systemd[1]: Started Load/Save RF Kill Switch Status. 14:01:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:01:48 executing program 4: 14:01:48 executing program 1: 14:01:48 executing program 3: 14:01:48 executing program 0: 14:01:48 executing program 2: [ 779.775430][ T1] systemd[1]: bluetooth.target: Unit not needed anymore. Stopping. [ 779.814017][ T1] systemd[1]: Stopped target Bluetooth. 14:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:01:49 executing program 4: 14:01:49 executing program 3: 14:01:49 executing program 0: 14:01:49 executing program 1: 14:01:49 executing program 2: [ 780.368754][T12263] Bluetooth: hci0: Frame reassembly failed (-84) 14:01:49 executing program 4: 14:01:49 executing program 0: 14:01:49 executing program 3: 14:01:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x801) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x204a6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setregid(r2, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) open(0x0, 0x0, 0x80) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x184) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000000c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)) 14:01:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae68, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ff0000/0x4000)=nil}) 14:01:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x48) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) ftruncate(r0, 0x208200) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/226) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 781.537140][ T32] audit: type=1800 audit(1595167310.712:35): pid=15910 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="ramfs" ino=47659 res=0 [ 781.676100][ T32] audit: type=1800 audit(1595167310.852:36): pid=15910 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="ramfs" ino=47662 res=0 [ 782.377141][T10545] Bluetooth: hci0: command 0x1003 tx timeout [ 782.383690][T14820] Bluetooth: hci0: sending frame failed (-49) [ 783.044281][ T1] systemd[1]: Reached target Bluetooth. [ 784.448262][T10545] Bluetooth: hci0: command 0x1001 tx timeout [ 784.454586][T14820] Bluetooth: hci0: sending frame failed (-49) [ 786.528360][T10545] Bluetooth: hci0: command 0x1009 tx timeout 14:02:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:02:00 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0xfffffffa}, 0x1c) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r1, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) socket$packet(0x11, 0x2, 0x300) 14:02:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x108, 0x0, 0x98, 0x108, 0x0, 0x1d8, 0x198, 0x198, 0x1d8, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}, 0x4}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "d652"}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 14:02:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 14:02:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 14:02:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) [ 790.806797][ T1] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 790.897135][ T1] systemd[1]: bluetooth.target: Unit not needed anymore. Stopping. [ 790.903121][ T1] systemd[1]: Stopped target Bluetooth. 14:02:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) [ 791.330809][T12263] Bluetooth: hci0: Frame reassembly failed (-84) 14:02:00 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="82c2178d", 0xfc9e}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:02:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100010000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f040000003b0100010000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 14:02:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ff0000/0x4000)=nil}) 14:02:01 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xfe) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r3, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r3, r3, &(0x7f0000000200), 0xaa4) [ 792.291230][ T1] systemd[1]: Reached target Bluetooth. [ 792.346175][T15961] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 792.397383][T15961] device gretap0 entered promiscuous mode 14:02:01 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}, 0x10) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x2a) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 792.880692][T15983] ===================================================== [ 792.887666][T15983] BUG: KMSAN: uninit-value in bpf_skb_load_helper_8+0xe0/0x290 [ 792.887968][T15983] CPU: 0 PID: 15983 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 792.898860][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.898860][T15983] Call Trace: [ 792.898860][T15983] dump_stack+0x1df/0x240 [ 792.898860][T15983] kmsan_report+0xf7/0x1e0 [ 792.898860][T15983] __msan_warning+0x58/0xa0 [ 792.898860][T15983] bpf_skb_load_helper_8+0xe0/0x290 [ 792.898860][T15983] ___bpf_prog_run+0x214d/0x97a0 [ 792.898860][T15983] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 792.898860][T15983] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 792.898860][T15983] __bpf_prog_run32+0x101/0x170 [ 792.898860][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 792.898860][T15983] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 792.898860][T15983] ? ___bpf_prog_run+0x97a0/0x97a0 [ 792.898860][T15983] sk_filter_trim_cap+0x42a/0xcc0 [ 792.898860][T15983] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 792.898860][T15983] ? kmsan_get_metadata+0x11d/0x180 [ 792.898860][T15983] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 792.898860][T15983] unix_dgram_sendmsg+0x1987/0x3c30 [ 792.898860][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 792.898860][T15983] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 792.898860][T15983] ? unix_dgram_peer_wake_me+0x7e0/0x7e0 [ 792.898860][T15983] kernel_sendmsg+0x433/0x440 [ 792.898860][T15983] sock_no_sendpage+0x235/0x300 [ 792.898860][T15983] ? sock_no_mmap+0x30/0x30 [ 792.898860][T15983] sock_sendpage+0x1e1/0x2c0 [ 792.898860][T15983] pipe_to_sendpage+0x38c/0x4c0 [ 792.898860][T15983] ? sock_fasync+0x250/0x250 [ 792.898860][T15983] __splice_from_pipe+0x565/0xf00 [ 792.898860][T15983] ? generic_splice_sendpage+0x2d0/0x2d0 [ 792.898860][T15983] generic_splice_sendpage+0x1d5/0x2d0 [ 793.058201][T15983] ? iter_file_splice_write+0x1800/0x1800 [ 793.058201][T15983] do_splice+0x2249/0x30a0 [ 793.058201][T15983] ? __msan_poison_alloca+0xf0/0x120 [ 793.058201][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 793.058201][T15983] ? kmsan_internal_set_origin+0x75/0xb0 [ 793.058201][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 793.058201][T15983] ? kmsan_get_metadata+0x11d/0x180 [ 793.058201][T15983] ? kmsan_set_origin_checked+0x95/0xf0 [ 793.058201][T15983] __se_sys_splice+0x271/0x420 [ 793.058201][T15983] ? __se_sys_splice+0x420/0x420 [ 793.058201][T15983] __ia32_sys_splice+0x6e/0x90 [ 793.058201][T15983] __do_fast_syscall_32+0x2aa/0x400 [ 793.058201][T15983] do_fast_syscall_32+0x6b/0xd0 [ 793.128183][T15983] do_SYSENTER_32+0x73/0x90 [ 793.129031][T15963] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.128183][T15983] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 793.128183][T15983] RIP: 0023:0xf7f39549 [ 793.128183][T15983] Code: Bad RIP value. [ 793.128183][T15983] RSP: 002b:00000000f5d130cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 793.128183][T15983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 793.128183][T15983] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000010005 [ 793.128183][T15983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.128183][T15983] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 793.128183][T15983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.128183][T15983] [ 793.128183][T15983] Uninit was stored to memory at: [ 793.128183][T15983] kmsan_internal_chain_origin+0xad/0x130 [ 793.128183][T15983] __msan_chain_origin+0x50/0x90 [ 793.128183][T15983] ___bpf_prog_run+0x6cbe/0x97a0 [ 793.128183][T15983] __bpf_prog_run32+0x101/0x170 [ 793.204117][T15983] sk_filter_trim_cap+0x42a/0xcc0 [ 793.204117][T15983] unix_dgram_sendmsg+0x1987/0x3c30 [ 793.204117][T15983] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 793.204117][T15983] kernel_sendmsg+0x433/0x440 [ 793.250619][T15983] sock_no_sendpage+0x235/0x300 [ 793.250619][T15983] sock_sendpage+0x1e1/0x2c0 [ 793.250619][T15983] pipe_to_sendpage+0x38c/0x4c0 [ 793.250619][T15983] __splice_from_pipe+0x565/0xf00 [ 793.250619][T15983] generic_splice_sendpage+0x1d5/0x2d0 [ 793.250619][T15983] do_splice+0x2249/0x30a0 [ 793.250619][T15983] __se_sys_splice+0x271/0x420 [ 793.250619][T15983] __ia32_sys_splice+0x6e/0x90 [ 793.250619][T15983] __do_fast_syscall_32+0x2aa/0x400 [ 793.250619][T15983] do_fast_syscall_32+0x6b/0xd0 [ 793.250619][T15983] do_SYSENTER_32+0x73/0x90 [ 793.250619][T15983] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 793.250619][T15983] [ 793.250619][T15983] Uninit was stored to memory at: [ 793.250619][T15983] kmsan_internal_chain_origin+0xad/0x130 [ 793.250619][T15983] __msan_chain_origin+0x50/0x90 [ 793.250619][T15983] ___bpf_prog_run+0x6c64/0x97a0 [ 793.250619][T15983] __bpf_prog_run32+0x101/0x170 [ 793.250619][T15983] sk_filter_trim_cap+0x42a/0xcc0 [ 793.250619][T15983] unix_dgram_sendmsg+0x1987/0x3c30 [ 793.250619][T15983] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 793.250619][T15983] kernel_sendmsg+0x433/0x440 [ 793.250619][T15983] sock_no_sendpage+0x235/0x300 [ 793.250619][T15983] sock_sendpage+0x1e1/0x2c0 [ 793.250619][T15983] pipe_to_sendpage+0x38c/0x4c0 [ 793.250619][T15983] __splice_from_pipe+0x565/0xf00 [ 793.250619][T15983] generic_splice_sendpage+0x1d5/0x2d0 [ 793.250619][T15983] do_splice+0x2249/0x30a0 [ 793.250619][T15983] __se_sys_splice+0x271/0x420 [ 793.250619][T15983] __ia32_sys_splice+0x6e/0x90 [ 793.250619][T15983] __do_fast_syscall_32+0x2aa/0x400 [ 793.250619][T15983] do_fast_syscall_32+0x6b/0xd0 [ 793.250619][T15983] do_SYSENTER_32+0x73/0x90 [ 793.250619][T15983] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 793.250619][T15983] [ 793.250619][T15983] Local variable ----regs@__bpf_prog_run32 created at: [ 793.250619][T15983] __bpf_prog_run32+0x87/0x170 [ 793.250619][T15983] __bpf_prog_run32+0x87/0x170 [ 793.250619][T15983] ===================================================== [ 793.250619][T15983] Disabling lock debugging due to kernel taint [ 793.250619][T15983] Kernel panic - not syncing: panic_on_warn set ... [ 793.250619][T15983] CPU: 0 PID: 15983 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 793.250619][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.250619][T15983] Call Trace: [ 793.250619][T15983] dump_stack+0x1df/0x240 [ 793.250619][T15983] panic+0x3d5/0xc3e [ 793.250619][T15983] kmsan_report+0x1df/0x1e0 [ 793.250619][T15983] __msan_warning+0x58/0xa0 [ 793.250619][T15983] bpf_skb_load_helper_8+0xe0/0x290 [ 793.250619][T15983] ___bpf_prog_run+0x214d/0x97a0 [ 793.250619][T15983] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 793.250619][T15983] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 793.250619][T15983] __bpf_prog_run32+0x101/0x170 [ 793.250619][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 793.250619][T15983] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 793.250619][T15983] ? ___bpf_prog_run+0x97a0/0x97a0 [ 793.250619][T15983] sk_filter_trim_cap+0x42a/0xcc0 [ 793.250619][T15983] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 793.250619][T15983] ? kmsan_get_metadata+0x11d/0x180 [ 793.250619][T15983] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 793.250619][T15983] unix_dgram_sendmsg+0x1987/0x3c30 [ 793.250619][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 793.250619][T15983] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 793.250619][T15983] ? unix_dgram_peer_wake_me+0x7e0/0x7e0 [ 793.250619][T15983] kernel_sendmsg+0x433/0x440 [ 793.250619][T15983] sock_no_sendpage+0x235/0x300 [ 793.250619][T15983] ? sock_no_mmap+0x30/0x30 [ 793.250619][T15983] sock_sendpage+0x1e1/0x2c0 [ 793.250619][T15983] pipe_to_sendpage+0x38c/0x4c0 [ 793.250619][T15983] ? sock_fasync+0x250/0x250 [ 793.250619][T15983] __splice_from_pipe+0x565/0xf00 [ 793.250619][T15983] ? generic_splice_sendpage+0x2d0/0x2d0 [ 793.250619][T15983] generic_splice_sendpage+0x1d5/0x2d0 [ 793.250619][T15983] ? iter_file_splice_write+0x1800/0x1800 [ 793.250619][T15983] do_splice+0x2249/0x30a0 [ 793.250619][T15983] ? __msan_poison_alloca+0xf0/0x120 [ 793.250619][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 793.250619][T15983] ? kmsan_internal_set_origin+0x75/0xb0 [ 793.250619][T15983] ? kmsan_get_metadata+0x4f/0x180 [ 793.250619][T15983] ? kmsan_get_metadata+0x11d/0x180 [ 793.250619][T15983] ? kmsan_set_origin_checked+0x95/0xf0 [ 793.250619][T15983] __se_sys_splice+0x271/0x420 [ 793.250619][T15983] ? __se_sys_splice+0x420/0x420 [ 793.250619][T15983] __ia32_sys_splice+0x6e/0x90 [ 793.250619][T15983] __do_fast_syscall_32+0x2aa/0x400 [ 793.250619][T15983] do_fast_syscall_32+0x6b/0xd0 [ 793.250619][T15983] do_SYSENTER_32+0x73/0x90 [ 793.250619][T15983] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 793.250619][T15983] RIP: 0023:0xf7f39549 [ 793.250619][T15983] Code: Bad RIP value. [ 793.250619][T15983] RSP: 002b:00000000f5d130cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 793.250619][T15983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 793.250619][T15983] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000010005 [ 793.250619][T15983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.250619][T15983] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 793.250619][T15983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.250619][T15983] Kernel Offset: 0x1f400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 793.250619][T15983] Rebooting in 86400 seconds..