20806] Uninit was stored to memory at: [ 1021.332992][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1021.338708][T20806] __msan_chain_origin+0x50/0x90 [ 1021.343626][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1021.348717][T20806] get_compat_msghdr+0x108/0x2b0 [ 1021.353629][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1021.358107][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1021.362766][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.368809][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.374943][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1021.380134][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1021.384976][T20806] do_SYSENTER_32+0x73/0x90 [ 1021.389456][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.395758][T20806] [ 1021.398072][T20806] Uninit was stored to memory at: [ 1021.403076][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1021.408780][T20806] __msan_chain_origin+0x50/0x90 [ 1021.413696][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1021.418781][T20806] get_compat_msghdr+0x108/0x2b0 [ 1021.423697][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1021.428175][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1021.432831][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.438878][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.445008][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1021.450198][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1021.455037][T20806] do_SYSENTER_32+0x73/0x90 [ 1021.459518][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.465814][T20806] [ 1021.468118][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1021.474769][T20806] do_recvmmsg+0xbf/0x22c0 [ 1021.479162][T20806] do_recvmmsg+0xbf/0x22c0 [ 1021.630639][T20806] not chained 360000 origins [ 1021.635363][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1021.644122][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.654178][T20806] Call Trace: [ 1021.657484][T20806] dump_stack+0x21c/0x280 [ 1021.661834][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1021.667593][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1021.672806][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1021.678362][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1021.684448][T20806] ? _copy_from_user+0x201/0x310 [ 1021.689400][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1021.694609][T20806] __msan_chain_origin+0x50/0x90 [ 1021.699595][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1021.704733][T20806] get_compat_msghdr+0x108/0x2b0 [ 1021.709685][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1021.714213][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1021.719422][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1021.725330][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1021.730537][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1021.735841][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1021.740615][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1021.745388][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1021.750097][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.756189][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.762443][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1021.767658][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1021.772541][T20806] do_SYSENTER_32+0x73/0x90 [ 1021.777063][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.783409][T20806] RIP: 0023:0xf7fea549 [ 1021.787468][T20806] Code: Bad RIP value. [ 1021.791535][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1021.799955][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1021.807928][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.815906][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1021.823890][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1021.831869][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.839857][T20806] Uninit was stored to memory at: [ 1021.844901][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1021.850641][T20806] __msan_chain_origin+0x50/0x90 [ 1021.855588][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1021.860713][T20806] get_compat_msghdr+0x108/0x2b0 [ 1021.865643][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1021.870150][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1021.874804][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.880865][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.887009][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1021.892186][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1021.897013][T20806] do_SYSENTER_32+0x73/0x90 [ 1021.901508][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.907817][T20806] [ 1021.910134][T20806] Uninit was stored to memory at: [ 1021.915144][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1021.920854][T20806] __msan_chain_origin+0x50/0x90 [ 1021.925783][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1021.930874][T20806] get_compat_msghdr+0x108/0x2b0 [ 1021.935788][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1021.940278][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1021.944974][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1021.951026][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1021.957157][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1021.962360][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1021.967203][T20806] do_SYSENTER_32+0x73/0x90 [ 1021.971702][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.978006][T20806] [ 1021.980326][T20806] Uninit was stored to memory at: [ 1021.985388][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1021.991097][T20806] __msan_chain_origin+0x50/0x90 [ 1021.996028][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.001252][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.006194][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.010680][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.015336][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.021400][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.027546][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.032798][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.037623][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.042120][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.048427][T20806] [ 1022.050729][T20806] Uninit was stored to memory at: [ 1022.055740][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1022.061446][T20806] __msan_chain_origin+0x50/0x90 [ 1022.066376][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.071553][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.076465][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.080955][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.085632][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.091680][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.097933][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.103124][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.107973][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.112458][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.118755][T20806] [ 1022.121063][T20806] Uninit was stored to memory at: [ 1022.126082][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1022.131778][T20806] __msan_chain_origin+0x50/0x90 [ 1022.136722][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.141826][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.146763][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.151242][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.155894][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.161982][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.168173][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.173362][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.178235][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.182726][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.189032][T20806] [ 1022.191344][T20806] Uninit was stored to memory at: [ 1022.196358][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1022.202078][T20806] __msan_chain_origin+0x50/0x90 [ 1022.207012][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.212102][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.217025][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.221515][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.226219][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.232282][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.238437][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.243616][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.248443][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.252925][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.259329][T20806] [ 1022.261649][T20806] Uninit was stored to memory at: [ 1022.266684][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1022.272385][T20806] __msan_chain_origin+0x50/0x90 [ 1022.277307][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.282412][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.287339][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.291824][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.296478][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.302536][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.308679][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.313870][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.318698][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.323201][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.329509][T20806] [ 1022.331817][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1022.338466][T20806] do_recvmmsg+0xbf/0x22c0 [ 1022.342862][T20806] do_recvmmsg+0xbf/0x22c0 [ 1022.589777][T20806] not chained 370000 origins [ 1022.594502][T20806] CPU: 1 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1022.603165][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.613200][T20806] Call Trace: [ 1022.616473][T20806] dump_stack+0x21c/0x280 [ 1022.620785][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1022.626491][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1022.631686][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1022.637216][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1022.643283][T20806] ? _copy_from_user+0x201/0x310 [ 1022.648204][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1022.653385][T20806] __msan_chain_origin+0x50/0x90 [ 1022.658302][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.663400][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.668317][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.672808][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1022.677983][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1022.683865][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1022.689071][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1022.694333][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1022.699071][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1022.703814][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.708476][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.714524][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.720658][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.725835][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.730664][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.735147][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.741446][T20806] RIP: 0023:0xf7fea549 [ 1022.745492][T20806] Code: Bad RIP value. [ 1022.749568][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1022.757966][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1022.765913][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1022.773862][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1022.781843][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1022.789799][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1022.797763][T20806] Uninit was stored to memory at: [ 1022.802790][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1022.808484][T20806] __msan_chain_origin+0x50/0x90 [ 1022.813399][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.818482][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.823393][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.827874][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.832530][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.838571][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.844702][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.849878][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.854706][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.859186][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.865492][T20806] [ 1022.867792][T20806] Uninit was stored to memory at: [ 1022.872792][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1022.878484][T20806] __msan_chain_origin+0x50/0x90 [ 1022.883511][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.888596][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.893513][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.897991][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.902748][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.908890][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.915020][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.920196][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.925026][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.929519][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.935814][T20806] [ 1022.938149][T20806] Uninit was stored to memory at: [ 1022.943152][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1022.948948][T20806] __msan_chain_origin+0x50/0x90 [ 1022.953864][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1022.958950][T20806] get_compat_msghdr+0x108/0x2b0 [ 1022.963864][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1022.968349][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1022.973021][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1022.979080][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1022.985213][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1022.990388][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1022.995213][T20806] do_SYSENTER_32+0x73/0x90 [ 1022.999693][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.005987][T20806] [ 1023.008293][T20806] Uninit was stored to memory at: [ 1023.013294][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.018988][T20806] __msan_chain_origin+0x50/0x90 [ 1023.023901][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.028985][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.033910][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.038387][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.043041][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.049088][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.055226][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.060404][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.065229][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.069709][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.076004][T20806] [ 1023.078305][T20806] Uninit was stored to memory at: [ 1023.083306][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.088998][T20806] __msan_chain_origin+0x50/0x90 [ 1023.093913][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.099008][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.103924][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.108417][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.113072][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.119114][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.125245][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.130423][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.135249][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.139729][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.146023][T20806] [ 1023.148326][T20806] Uninit was stored to memory at: [ 1023.153328][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.159041][T20806] __msan_chain_origin+0x50/0x90 [ 1023.163964][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.169067][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.173984][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.178464][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.183122][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.189167][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.195299][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.200477][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.205304][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.209786][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.216081][T20806] [ 1023.218383][T20806] Uninit was stored to memory at: [ 1023.223382][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.229076][T20806] __msan_chain_origin+0x50/0x90 [ 1023.233992][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.239077][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.243990][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.248469][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.253124][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.259174][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.265312][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.270499][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.275329][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.279810][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.286146][T20806] [ 1023.288454][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1023.295107][T20806] do_recvmmsg+0xbf/0x22c0 [ 1023.299503][T20806] do_recvmmsg+0xbf/0x22c0 [ 1023.493075][T20806] not chained 380000 origins [ 1023.497795][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1023.506462][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.516519][T20806] Call Trace: [ 1023.519818][T20806] dump_stack+0x21c/0x280 [ 1023.524158][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1023.529910][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1023.535118][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1023.540680][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1023.546754][T20806] ? _copy_from_user+0x201/0x310 [ 1023.551704][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1023.556908][T20806] __msan_chain_origin+0x50/0x90 [ 1023.561859][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.566987][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.571936][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.576462][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1023.581673][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1023.587573][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1023.592781][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1023.598072][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1023.602848][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1023.607624][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.612327][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.618412][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.624689][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.629909][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.634759][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.639248][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.645556][T20806] RIP: 0023:0xf7fea549 [ 1023.649607][T20806] Code: Bad RIP value. [ 1023.653661][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1023.662052][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1023.670004][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1023.677954][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1023.685907][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1023.693869][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1023.701840][T20806] Uninit was stored to memory at: [ 1023.706937][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.712632][T20806] __msan_chain_origin+0x50/0x90 [ 1023.717568][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.722658][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.727572][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.732051][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.736705][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.742749][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.748884][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.754058][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.758883][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.763367][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.769665][T20806] [ 1023.771980][T20806] Uninit was stored to memory at: [ 1023.776980][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.782674][T20806] __msan_chain_origin+0x50/0x90 [ 1023.787585][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.792671][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.797583][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.802064][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.806719][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.812765][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.818895][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.824169][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.828996][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.833481][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.839779][T20806] [ 1023.842082][T20806] Uninit was stored to memory at: [ 1023.847136][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.852843][T20806] __msan_chain_origin+0x50/0x90 [ 1023.857757][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.862859][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.867777][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.872259][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.876912][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.882953][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.889082][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.894257][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.899084][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.903567][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.909863][T20806] [ 1023.912165][T20806] Uninit was stored to memory at: [ 1023.917165][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.922996][T20806] __msan_chain_origin+0x50/0x90 [ 1023.927909][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1023.932995][T20806] get_compat_msghdr+0x108/0x2b0 [ 1023.937907][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1023.942385][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1023.947036][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1023.953220][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1023.959364][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1023.964568][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1023.969515][T20806] do_SYSENTER_32+0x73/0x90 [ 1023.973999][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1023.980496][T20806] [ 1023.982813][T20806] Uninit was stored to memory at: [ 1023.987815][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1023.993598][T20806] __msan_chain_origin+0x50/0x90 [ 1023.998517][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.003607][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.008521][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.013001][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.017657][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.023727][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.029985][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.035160][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.039988][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.044468][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.050891][T20806] [ 1024.053308][T20806] Uninit was stored to memory at: [ 1024.058318][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1024.064012][T20806] __msan_chain_origin+0x50/0x90 [ 1024.068925][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.074015][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.078925][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.083403][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.088172][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.094219][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.100353][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.105544][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.110386][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.114865][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.121161][T20806] [ 1024.123462][T20806] Uninit was stored to memory at: [ 1024.128465][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1024.134164][T20806] __msan_chain_origin+0x50/0x90 [ 1024.139078][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.144165][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.149214][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.153707][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.158360][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.164402][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.170545][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.175732][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.180563][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.185054][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.191352][T20806] [ 1024.193659][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1024.200321][T20806] do_recvmmsg+0xbf/0x22c0 [ 1024.204726][T20806] do_recvmmsg+0xbf/0x22c0 [ 1024.432346][T20806] not chained 390000 origins [ 1024.436996][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1024.445667][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.455730][T20806] Call Trace: [ 1024.459044][T20806] dump_stack+0x21c/0x280 [ 1024.463394][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1024.469138][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1024.474350][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1024.479898][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1024.485947][T20806] ? _copy_from_user+0x201/0x310 [ 1024.490865][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1024.496095][T20806] __msan_chain_origin+0x50/0x90 [ 1024.501017][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.506113][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.511036][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.515528][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1024.520710][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1024.526590][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1024.531842][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1024.537112][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1024.541861][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1024.546609][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.551275][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.557326][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.563467][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.568653][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.573486][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.577973][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.584431][T20806] RIP: 0023:0xf7fea549 [ 1024.588470][T20806] Code: Bad RIP value. [ 1024.592523][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1024.600909][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1024.608857][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.616806][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.624775][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1024.632724][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.640695][T20806] Uninit was stored to memory at: [ 1024.645716][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1024.651415][T20806] __msan_chain_origin+0x50/0x90 [ 1024.656348][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.661435][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.666347][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.670826][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.675487][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.681529][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.687657][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.692852][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.697678][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.702162][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.708457][T20806] [ 1024.710773][T20806] Uninit was stored to memory at: [ 1024.715776][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1024.721594][T20806] __msan_chain_origin+0x50/0x90 [ 1024.726508][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.731594][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.736506][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.740985][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.745664][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.751714][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.757867][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.763044][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.767871][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.772350][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.778747][T20806] [ 1024.781047][T20806] Uninit was stored to memory at: [ 1024.786054][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1024.791761][T20806] __msan_chain_origin+0x50/0x90 [ 1024.796678][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.801766][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.806681][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.811158][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.815831][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.821876][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.828023][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.833201][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.838028][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.842507][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.848838][T20806] [ 1024.851143][T20806] Uninit was stored to memory at: [ 1024.856265][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1024.861965][T20806] __msan_chain_origin+0x50/0x90 [ 1024.866902][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.872007][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.876921][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.881400][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.886055][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.892105][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.898237][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.903416][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.908253][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.912735][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.919036][T20806] [ 1024.921347][T20806] Uninit was stored to memory at: [ 1024.926347][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1024.932042][T20806] __msan_chain_origin+0x50/0x90 [ 1024.936956][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1024.942043][T20806] get_compat_msghdr+0x108/0x2b0 [ 1024.946955][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1024.951435][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1024.956094][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1024.962138][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1024.968266][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1024.973476][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1024.978303][T20806] do_SYSENTER_32+0x73/0x90 [ 1024.982785][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.989088][T20806] [ 1024.991399][T20806] Uninit was stored to memory at: [ 1024.996506][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.002201][T20806] __msan_chain_origin+0x50/0x90 [ 1025.007115][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.012212][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.017126][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.021604][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.026255][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.032298][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.038436][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.043612][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.048438][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.052927][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.059224][T20806] [ 1025.061526][T20806] Uninit was stored to memory at: [ 1025.066529][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.072241][T20806] __msan_chain_origin+0x50/0x90 [ 1025.077160][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.082274][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.087187][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.091669][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.096322][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.102363][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.108494][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.113779][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.118604][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.123083][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.129388][T20806] [ 1025.131692][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1025.138342][T20806] do_recvmmsg+0xbf/0x22c0 [ 1025.142735][T20806] do_recvmmsg+0xbf/0x22c0 [ 1025.285334][T20806] not chained 400000 origins [ 1025.289972][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1025.298649][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.308714][T20806] Call Trace: [ 1025.312021][T20806] dump_stack+0x21c/0x280 [ 1025.316373][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1025.322129][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1025.327336][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1025.332894][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1025.338973][T20806] ? _copy_from_user+0x201/0x310 [ 1025.343930][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1025.349150][T20806] __msan_chain_origin+0x50/0x90 [ 1025.354099][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.359231][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.364181][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.368706][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1025.373925][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1025.379827][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1025.385051][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1025.390350][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1025.395122][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1025.399899][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.404598][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.410677][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.416837][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.422045][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.426921][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.431437][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.437765][T20806] RIP: 0023:0xf7fea549 [ 1025.441829][T20806] Code: Bad RIP value. [ 1025.445896][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1025.454314][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1025.462292][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1025.470271][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.478246][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1025.486224][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1025.494207][T20806] Uninit was stored to memory at: [ 1025.499242][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.504969][T20806] __msan_chain_origin+0x50/0x90 [ 1025.509918][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.515034][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.520063][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.524569][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.529255][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.535417][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.541579][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.546786][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.551642][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.556152][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.562561][T20806] [ 1025.564890][T20806] Uninit was stored to memory at: [ 1025.569942][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.575871][T20806] __msan_chain_origin+0x50/0x90 [ 1025.580822][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.585939][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.590884][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.595381][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.600051][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.606111][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.612244][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.617419][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.622253][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.626732][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.633126][T20806] [ 1025.635427][T20806] Uninit was stored to memory at: [ 1025.640450][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.646163][T20806] __msan_chain_origin+0x50/0x90 [ 1025.651080][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.656167][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.661104][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.665604][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.670274][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.676322][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.682461][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.687641][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.692482][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.696967][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.703264][T20806] [ 1025.705569][T20806] Uninit was stored to memory at: [ 1025.710578][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.716274][T20806] __msan_chain_origin+0x50/0x90 [ 1025.721202][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.726320][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.731235][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.735711][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.740386][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.746443][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.752579][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.757758][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.762590][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.767088][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.773382][T20806] [ 1025.775687][T20806] Uninit was stored to memory at: [ 1025.780701][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.786416][T20806] __msan_chain_origin+0x50/0x90 [ 1025.791435][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.796628][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.801551][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.806042][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.810697][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.816741][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.822872][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.828048][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.832881][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.837366][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.843662][T20806] [ 1025.845965][T20806] Uninit was stored to memory at: [ 1025.850990][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.856686][T20806] __msan_chain_origin+0x50/0x90 [ 1025.861615][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.866718][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.871633][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.876111][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.880779][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.886939][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.893072][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.898334][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.903166][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.907650][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.913973][T20806] [ 1025.916278][T20806] Uninit was stored to memory at: [ 1025.921300][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1025.927009][T20806] __msan_chain_origin+0x50/0x90 [ 1025.931928][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1025.937015][T20806] get_compat_msghdr+0x108/0x2b0 [ 1025.941931][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1025.946509][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1025.951167][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1025.957210][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1025.963347][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1025.968527][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1025.973360][T20806] do_SYSENTER_32+0x73/0x90 [ 1025.977843][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1025.984139][T20806] [ 1025.986444][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1025.993094][T20806] do_recvmmsg+0xbf/0x22c0 [ 1025.997486][T20806] do_recvmmsg+0xbf/0x22c0 [ 1026.183512][T20806] not chained 410000 origins [ 1026.188153][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1026.196820][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.206861][T20806] Call Trace: [ 1026.210151][T20806] dump_stack+0x21c/0x280 [ 1026.214463][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1026.220195][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1026.225391][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1026.230916][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1026.236965][T20806] ? _copy_from_user+0x201/0x310 [ 1026.241887][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1026.247212][T20806] __msan_chain_origin+0x50/0x90 [ 1026.252155][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.257272][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.262198][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.266688][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1026.271869][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1026.277741][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1026.282947][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1026.288210][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1026.292952][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1026.297692][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.302377][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.308446][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.314584][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.319796][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.324641][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.329128][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.335433][T20806] RIP: 0023:0xf7fea549 [ 1026.339478][T20806] Code: Bad RIP value. [ 1026.343531][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1026.351919][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1026.359880][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1026.367840][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1026.375791][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1026.383744][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1026.391699][T20806] Uninit was stored to memory at: [ 1026.396713][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1026.402408][T20806] __msan_chain_origin+0x50/0x90 [ 1026.407328][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.412441][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.417370][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.421850][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.426506][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.432551][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.438682][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.443866][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.448725][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.453217][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.459518][T20806] [ 1026.461833][T20806] Uninit was stored to memory at: [ 1026.466835][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1026.472532][T20806] __msan_chain_origin+0x50/0x90 [ 1026.477463][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.482554][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.487463][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.491941][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.496599][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.502646][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.508784][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.513974][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.518813][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.523318][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.529635][T20806] [ 1026.531938][T20806] Uninit was stored to memory at: [ 1026.536941][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1026.542633][T20806] __msan_chain_origin+0x50/0x90 [ 1026.547545][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.552635][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.557573][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.562074][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.566729][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.572786][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.578942][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.584128][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.588967][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.593469][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.599771][T20806] [ 1026.602085][T20806] Uninit was stored to memory at: [ 1026.607085][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1026.612824][T20806] __msan_chain_origin+0x50/0x90 [ 1026.617736][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.622823][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.627735][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.632213][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.636887][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.642932][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.649085][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.654275][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.659493][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.663985][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.670300][T20806] [ 1026.672601][T20806] Uninit was stored to memory at: [ 1026.677603][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1026.683300][T20806] __msan_chain_origin+0x50/0x90 [ 1026.688218][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.693316][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.698227][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.702707][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.707363][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.713411][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.719554][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.724746][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.729583][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.734075][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.740379][T20806] [ 1026.742706][T20806] Uninit was stored to memory at: [ 1026.747722][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1026.753417][T20806] __msan_chain_origin+0x50/0x90 [ 1026.758355][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.763465][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.768391][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.772879][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.777556][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.783607][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.789741][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.794919][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.799758][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.804257][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.810555][T20806] [ 1026.812857][T20806] Uninit was stored to memory at: [ 1026.817860][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1026.823662][T20806] __msan_chain_origin+0x50/0x90 [ 1026.828585][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1026.833696][T20806] get_compat_msghdr+0x108/0x2b0 [ 1026.838611][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1026.843098][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1026.847773][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1026.853826][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1026.859976][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1026.865171][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1026.870018][T20806] do_SYSENTER_32+0x73/0x90 [ 1026.874498][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1026.880799][T20806] [ 1026.883123][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1026.889777][T20806] do_recvmmsg+0xbf/0x22c0 [ 1026.894167][T20806] do_recvmmsg+0xbf/0x22c0 [ 1027.083571][T20806] not chained 420000 origins [ 1027.088209][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1027.096977][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.107036][T20806] Call Trace: [ 1027.110469][T20806] dump_stack+0x21c/0x280 [ 1027.114821][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1027.120575][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1027.125787][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1027.131356][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1027.137442][T20806] ? _copy_from_user+0x201/0x310 [ 1027.142394][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1027.147605][T20806] __msan_chain_origin+0x50/0x90 [ 1027.152571][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.157737][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.162694][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.167229][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1027.172486][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1027.178389][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1027.183618][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1027.188914][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1027.193685][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1027.198465][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.203173][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.209290][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.215466][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.220686][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.225545][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.230063][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.236392][T20806] RIP: 0023:0xf7fea549 [ 1027.240453][T20806] Code: Bad RIP value. [ 1027.244568][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1027.252982][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1027.261005][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1027.268972][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1027.276976][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1027.284932][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1027.292914][T20806] Uninit was stored to memory at: [ 1027.298076][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1027.303783][T20806] __msan_chain_origin+0x50/0x90 [ 1027.308722][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.313920][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.319038][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.323534][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.328198][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.334254][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.340391][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.345657][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.350600][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.355115][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.361416][T20806] [ 1027.363718][T20806] Uninit was stored to memory at: [ 1027.368733][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1027.374450][T20806] __msan_chain_origin+0x50/0x90 [ 1027.379369][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.384459][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.389383][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.393879][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.398670][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.404732][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.410877][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.416074][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.420905][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.425388][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.431686][T20806] [ 1027.433988][T20806] Uninit was stored to memory at: [ 1027.438996][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1027.444689][T20806] __msan_chain_origin+0x50/0x90 [ 1027.449619][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.454725][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.459643][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.464121][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.468790][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.474854][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.480988][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.486169][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.491014][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.495512][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.501840][T20806] [ 1027.504144][T20806] Uninit was stored to memory at: [ 1027.509161][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1027.514884][T20806] __msan_chain_origin+0x50/0x90 [ 1027.519800][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.524886][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.529810][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.534321][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.538982][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.545024][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.551164][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.556354][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.561182][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.565669][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.571962][T20806] [ 1027.574305][T20806] Uninit was stored to memory at: [ 1027.579314][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1027.585011][T20806] __msan_chain_origin+0x50/0x90 [ 1027.589936][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.595034][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.599952][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.604432][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.609109][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.615177][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.621316][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.626491][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.631340][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.635831][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.642135][T20806] [ 1027.644448][T20806] Uninit was stored to memory at: [ 1027.649463][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1027.655171][T20806] __msan_chain_origin+0x50/0x90 [ 1027.660175][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.665260][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.670191][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.674683][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.679340][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.685383][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.691516][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.696694][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.701519][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.705997][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.712300][T20806] [ 1027.714604][T20806] Uninit was stored to memory at: [ 1027.719606][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1027.725324][T20806] __msan_chain_origin+0x50/0x90 [ 1027.730251][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1027.735359][T20806] get_compat_msghdr+0x108/0x2b0 [ 1027.740278][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1027.744756][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1027.749422][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1027.755481][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1027.761614][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1027.766792][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1027.771622][T20806] do_SYSENTER_32+0x73/0x90 [ 1027.776101][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.782398][T20806] [ 1027.784701][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1027.791367][T20806] do_recvmmsg+0xbf/0x22c0 [ 1027.795775][T20806] do_recvmmsg+0xbf/0x22c0 [ 1027.986397][T20806] not chained 430000 origins [ 1027.991035][T20806] CPU: 1 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1027.999716][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.009782][T20806] Call Trace: [ 1028.013087][T20806] dump_stack+0x21c/0x280 [ 1028.017432][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1028.023179][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.028457][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1028.033995][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1028.040143][T20806] ? _copy_from_user+0x201/0x310 [ 1028.045066][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.050248][T20806] __msan_chain_origin+0x50/0x90 [ 1028.055170][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.060270][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.065193][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.069684][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.074878][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1028.080752][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.085932][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1028.091213][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1028.095967][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1028.100708][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.105383][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.111438][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.117575][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.122763][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.127599][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.132087][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.138399][T20806] RIP: 0023:0xf7fea549 [ 1028.142452][T20806] Code: Bad RIP value. [ 1028.146599][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1028.155143][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1028.163104][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1028.171057][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1028.179286][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1028.187243][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1028.195207][T20806] Uninit was stored to memory at: [ 1028.200297][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1028.206001][T20806] __msan_chain_origin+0x50/0x90 [ 1028.210921][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.216012][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.220933][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.225414][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.230086][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.236132][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.242271][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.247447][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.252287][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.256788][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.263083][T20806] [ 1028.265385][T20806] Uninit was stored to memory at: [ 1028.270403][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1028.276104][T20806] __msan_chain_origin+0x50/0x90 [ 1028.281044][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.286133][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.291048][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.295529][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.300184][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.306231][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.312361][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.317537][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.322380][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.326872][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.333175][T20806] [ 1028.335482][T20806] Uninit was stored to memory at: [ 1028.340489][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1028.346185][T20806] __msan_chain_origin+0x50/0x90 [ 1028.351099][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.356209][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.361124][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.365607][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.370260][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.376305][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.382444][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.387623][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.392452][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.396933][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.403230][T20806] [ 1028.405532][T20806] Uninit was stored to memory at: [ 1028.410548][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1028.416254][T20806] __msan_chain_origin+0x50/0x90 [ 1028.421214][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.426309][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.431224][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.435703][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.440357][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.446400][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.452529][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.457705][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.462536][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.467022][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.473315][T20806] [ 1028.475617][T20806] Uninit was stored to memory at: [ 1028.480619][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1028.486313][T20806] __msan_chain_origin+0x50/0x90 [ 1028.491227][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.496355][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.501354][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.505859][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.510512][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.516553][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.522702][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.527876][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.532702][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.537181][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.543474][T20806] [ 1028.545776][T20806] Uninit was stored to memory at: [ 1028.550778][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1028.556473][T20806] __msan_chain_origin+0x50/0x90 [ 1028.561386][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.566475][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.571387][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.575867][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.580520][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.586561][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.592689][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.597893][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.602718][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.607210][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.613504][T20806] [ 1028.615806][T20806] Uninit was stored to memory at: [ 1028.620804][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1028.626497][T20806] __msan_chain_origin+0x50/0x90 [ 1028.631409][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.636496][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.641407][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.645883][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1028.650535][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1028.656590][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1028.662717][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1028.667891][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1028.672723][T20806] do_SYSENTER_32+0x73/0x90 [ 1028.677204][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1028.683496][T20806] [ 1028.685823][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1028.692470][T20806] do_recvmmsg+0xbf/0x22c0 [ 1028.696860][T20806] do_recvmmsg+0xbf/0x22c0 [ 1028.875217][T20806] not chained 440000 origins [ 1028.879895][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1028.888565][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.898623][T20806] Call Trace: [ 1028.901924][T20806] dump_stack+0x21c/0x280 [ 1028.906264][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1028.912032][T20806] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1028.918200][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.923405][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1028.928955][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1028.935027][T20806] ? _copy_from_user+0x201/0x310 [ 1028.939976][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.945205][T20806] __msan_chain_origin+0x50/0x90 [ 1028.950157][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1028.955286][T20806] get_compat_msghdr+0x108/0x2b0 [ 1028.960237][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1028.964765][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.969975][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1028.975876][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1028.981084][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1028.986379][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1028.991146][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1028.995916][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.000619][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.006699][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.012863][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.018074][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.022935][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.027478][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.033808][T20806] RIP: 0023:0xf7fea549 [ 1029.037866][T20806] Code: Bad RIP value. [ 1029.041930][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1029.050345][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1029.058320][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.066298][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1029.074277][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1029.082341][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1029.090299][T20806] Uninit was stored to memory at: [ 1029.095422][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.101123][T20806] __msan_chain_origin+0x50/0x90 [ 1029.106038][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.111128][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.116043][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.120590][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.125245][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.131397][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.137540][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.142736][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.147569][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.152054][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.158354][T20806] [ 1029.160673][T20806] Uninit was stored to memory at: [ 1029.165681][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.171380][T20806] __msan_chain_origin+0x50/0x90 [ 1029.176294][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.181383][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.186296][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.190796][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.195468][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.201542][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.207842][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.213108][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.217952][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.222437][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.228736][T20806] [ 1029.231041][T20806] Uninit was stored to memory at: [ 1029.236054][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.241752][T20806] __msan_chain_origin+0x50/0x90 [ 1029.246667][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.251758][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.256933][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.261437][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.266100][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.272156][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.278299][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.283476][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.288309][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.292802][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.299098][T20806] [ 1029.301402][T20806] Uninit was stored to memory at: [ 1029.306404][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.312102][T20806] __msan_chain_origin+0x50/0x90 [ 1029.317034][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.322141][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.327062][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.331556][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.336214][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.342263][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.348401][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.353577][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.358425][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.362905][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.369203][T20806] [ 1029.371505][T20806] Uninit was stored to memory at: [ 1029.376510][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.382209][T20806] __msan_chain_origin+0x50/0x90 [ 1029.387212][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.392299][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.397234][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.401716][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.406373][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.412416][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.418566][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.423760][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.428588][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.433072][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.439369][T20806] [ 1029.441669][T20806] Uninit was stored to memory at: [ 1029.446678][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.452374][T20806] __msan_chain_origin+0x50/0x90 [ 1029.457289][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.462399][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.467314][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.471795][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.476447][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.482490][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.488651][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.493862][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.498697][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.503181][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.509478][T20806] [ 1029.511799][T20806] Uninit was stored to memory at: [ 1029.516804][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.522502][T20806] __msan_chain_origin+0x50/0x90 [ 1029.527423][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.532514][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.537501][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.542000][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.546664][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.552711][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.558845][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.564030][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.568858][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.573349][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.579661][T20806] [ 1029.581965][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1029.588614][T20806] do_recvmmsg+0xbf/0x22c0 [ 1029.593005][T20806] do_recvmmsg+0xbf/0x22c0 [ 1029.741688][T20806] not chained 450000 origins [ 1029.746320][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1029.754988][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.765070][T20806] Call Trace: [ 1029.768389][T20806] dump_stack+0x21c/0x280 [ 1029.772733][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1029.778485][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1029.783710][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1029.789266][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1029.795343][T20806] ? _copy_from_user+0x201/0x310 [ 1029.800291][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1029.805498][T20806] __msan_chain_origin+0x50/0x90 [ 1029.810448][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.815580][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.820532][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.825061][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1029.830277][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1029.836395][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1029.841694][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1029.846990][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1029.851763][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1029.856547][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.861260][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.867347][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.873550][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1029.878770][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1029.883624][T20806] do_SYSENTER_32+0x73/0x90 [ 1029.888122][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.894522][T20806] RIP: 0023:0xf7fea549 [ 1029.898561][T20806] Code: Bad RIP value. [ 1029.902599][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1029.911099][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1029.919048][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.926999][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1029.934948][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1029.942900][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1029.950854][T20806] Uninit was stored to memory at: [ 1029.955861][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1029.961560][T20806] __msan_chain_origin+0x50/0x90 [ 1029.966473][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1029.971558][T20806] get_compat_msghdr+0x108/0x2b0 [ 1029.976472][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1029.980953][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1029.985605][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1029.991647][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1029.997779][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.002987][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.007815][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.012294][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.018589][T20806] [ 1030.020891][T20806] Uninit was stored to memory at: [ 1030.025891][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.031585][T20806] __msan_chain_origin+0x50/0x90 [ 1030.036500][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.041596][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.046512][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.050992][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.055645][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.061690][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.067819][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.073013][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.077850][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.082339][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.088638][T20806] [ 1030.090941][T20806] Uninit was stored to memory at: [ 1030.095942][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.101638][T20806] __msan_chain_origin+0x50/0x90 [ 1030.106552][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.111643][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.116555][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.121036][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.125695][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.131739][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.137871][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.143047][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.147876][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.152355][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.158650][T20806] [ 1030.160952][T20806] Uninit was stored to memory at: [ 1030.165953][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.171650][T20806] __msan_chain_origin+0x50/0x90 [ 1030.176579][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.181713][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.186636][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.191207][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.195878][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.202014][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.208322][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.213498][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.218325][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.222819][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.229113][T20806] [ 1030.231418][T20806] Uninit was stored to memory at: [ 1030.236422][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.242118][T20806] __msan_chain_origin+0x50/0x90 [ 1030.247034][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.252134][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.257075][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.261571][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.266226][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.272268][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.278402][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.283576][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.288416][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.292918][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.299232][T20806] [ 1030.301536][T20806] Uninit was stored to memory at: [ 1030.306539][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.312235][T20806] __msan_chain_origin+0x50/0x90 [ 1030.317152][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.322239][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.327190][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.331671][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.336325][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.342384][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.348532][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.353712][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.358544][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.363028][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.369325][T20806] [ 1030.371628][T20806] Uninit was stored to memory at: [ 1030.376631][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.382439][T20806] __msan_chain_origin+0x50/0x90 [ 1030.387363][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.392450][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.397364][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.401850][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.406536][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.412581][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.418712][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.423889][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.428723][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.433204][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.439501][T20806] [ 1030.441807][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1030.448473][T20806] do_recvmmsg+0xbf/0x22c0 [ 1030.452864][T20806] do_recvmmsg+0xbf/0x22c0 [ 1030.692464][T20806] not chained 460000 origins [ 1030.697183][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1030.705847][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.715896][T20806] Call Trace: [ 1030.719174][T20806] dump_stack+0x21c/0x280 [ 1030.723483][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1030.729230][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1030.734439][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1030.739993][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1030.746070][T20806] ? _copy_from_user+0x201/0x310 [ 1030.751004][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1030.756180][T20806] __msan_chain_origin+0x50/0x90 [ 1030.761105][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.766336][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.771366][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.775880][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1030.781067][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1030.786945][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1030.792127][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1030.797394][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1030.802139][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1030.806885][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.811552][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.817637][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.823777][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.828959][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.833790][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.838300][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.844617][T20806] RIP: 0023:0xf7fea549 [ 1030.848765][T20806] Code: Bad RIP value. [ 1030.852804][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1030.861204][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1030.869171][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.877124][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1030.885094][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1030.893069][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1030.901171][T20806] Uninit was stored to memory at: [ 1030.906180][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.911876][T20806] __msan_chain_origin+0x50/0x90 [ 1030.916790][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.921883][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.926796][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1030.931299][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1030.935969][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1030.942032][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1030.948176][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1030.953366][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1030.958208][T20806] do_SYSENTER_32+0x73/0x90 [ 1030.962704][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.969002][T20806] [ 1030.971305][T20806] Uninit was stored to memory at: [ 1030.976311][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1030.982009][T20806] __msan_chain_origin+0x50/0x90 [ 1030.986944][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1030.992081][T20806] get_compat_msghdr+0x108/0x2b0 [ 1030.996993][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.001486][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.006158][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.012205][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.018358][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.023580][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.028536][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.033206][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.039506][T20806] [ 1031.041823][T20806] Uninit was stored to memory at: [ 1031.046827][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1031.052526][T20806] __msan_chain_origin+0x50/0x90 [ 1031.057548][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.062653][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.067583][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.072068][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.076726][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.082773][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.088916][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.094091][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.098932][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.103435][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.109771][T20806] [ 1031.112077][T20806] Uninit was stored to memory at: [ 1031.117082][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1031.122807][T20806] __msan_chain_origin+0x50/0x90 [ 1031.127723][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.132813][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.137728][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.142211][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.146864][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.152909][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.159075][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.164278][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.169154][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.173655][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.179966][T20806] [ 1031.182287][T20806] Uninit was stored to memory at: [ 1031.187294][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1031.192992][T20806] __msan_chain_origin+0x50/0x90 [ 1031.197922][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.203034][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.207968][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.212559][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.217216][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.223263][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.229424][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.234624][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.239464][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.243962][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.250268][T20806] [ 1031.252569][T20806] Uninit was stored to memory at: [ 1031.257578][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1031.263275][T20806] __msan_chain_origin+0x50/0x90 [ 1031.268192][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.273278][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.278201][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.282703][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.287361][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.293409][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.299556][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.304746][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.309575][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.314057][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.320357][T20806] [ 1031.322686][T20806] Uninit was stored to memory at: [ 1031.327688][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1031.333384][T20806] __msan_chain_origin+0x50/0x90 [ 1031.338308][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.343409][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.348325][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.352800][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.357473][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.363522][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.369657][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.374850][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.379688][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.384181][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.390500][T20806] [ 1031.392806][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1031.399466][T20806] do_recvmmsg+0xbf/0x22c0 [ 1031.403876][T20806] do_recvmmsg+0xbf/0x22c0 [ 1031.690271][T20806] not chained 470000 origins [ 1031.694886][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1031.703558][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.713613][T20806] Call Trace: [ 1031.716942][T20806] dump_stack+0x21c/0x280 [ 1031.721295][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1031.727056][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1031.732274][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1031.737831][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1031.743912][T20806] ? _copy_from_user+0x201/0x310 [ 1031.748867][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1031.754061][T20806] __msan_chain_origin+0x50/0x90 [ 1031.758996][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.764124][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.769064][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.773609][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1031.778817][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1031.784708][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1031.789905][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1031.795196][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1031.799951][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1031.804715][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.809397][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.815464][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.821612][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.826820][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.831667][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.836174][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.842489][T20806] RIP: 0023:0xf7fea549 [ 1031.846539][T20806] Code: Bad RIP value. [ 1031.850594][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1031.858993][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1031.866953][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1031.874917][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1031.882878][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1031.890843][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1031.898832][T20806] Uninit was stored to memory at: [ 1031.903858][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1031.909567][T20806] __msan_chain_origin+0x50/0x90 [ 1031.914628][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.919749][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.924679][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.929171][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1031.933843][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1031.939907][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1031.946052][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1031.951241][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1031.956082][T20806] do_SYSENTER_32+0x73/0x90 [ 1031.960581][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1031.966889][T20806] [ 1031.969206][T20806] Uninit was stored to memory at: [ 1031.974223][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1031.979932][T20806] __msan_chain_origin+0x50/0x90 [ 1031.984864][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1031.989981][T20806] get_compat_msghdr+0x108/0x2b0 [ 1031.994932][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1031.999431][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.004098][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.010176][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.016333][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.021539][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.026378][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.030873][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.037179][T20806] [ 1032.039492][T20806] Uninit was stored to memory at: [ 1032.044510][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.050218][T20806] __msan_chain_origin+0x50/0x90 [ 1032.055154][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.060253][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.065176][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.069668][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.074334][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.080399][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.086543][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.091730][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.096572][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.101066][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.107478][T20806] [ 1032.109790][T20806] Uninit was stored to memory at: [ 1032.114805][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.120528][T20806] __msan_chain_origin+0x50/0x90 [ 1032.125460][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.130561][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.135491][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.139984][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.144651][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.150714][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.156873][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.162068][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.166921][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.171427][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.177736][T20806] [ 1032.180050][T20806] Uninit was stored to memory at: [ 1032.185116][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.190828][T20806] __msan_chain_origin+0x50/0x90 [ 1032.195756][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.200872][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.205809][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.210312][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.214985][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.221042][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.227186][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.232378][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.237227][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.241723][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.248027][T20806] [ 1032.250339][T20806] Uninit was stored to memory at: [ 1032.255355][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.261062][T20806] __msan_chain_origin+0x50/0x90 [ 1032.265990][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.271092][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.276019][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.280520][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.285201][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.291259][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.297404][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.302590][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.307428][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.311924][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.318253][T20806] [ 1032.320578][T20806] Uninit was stored to memory at: [ 1032.325598][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.331308][T20806] __msan_chain_origin+0x50/0x90 [ 1032.336238][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.341353][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.346283][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.350774][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.355444][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.361507][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.367655][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.372848][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.377690][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.382181][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.388486][T20806] [ 1032.390804][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1032.397483][T20806] do_recvmmsg+0xbf/0x22c0 [ 1032.401903][T20806] do_recvmmsg+0xbf/0x22c0 [ 1032.602109][T20806] not chained 480000 origins [ 1032.606744][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1032.615417][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.625475][T20806] Call Trace: [ 1032.628805][T20806] dump_stack+0x21c/0x280 [ 1032.633254][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1032.639009][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1032.644219][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1032.649780][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1032.655867][T20806] ? _copy_from_user+0x201/0x310 [ 1032.660826][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1032.666035][T20806] __msan_chain_origin+0x50/0x90 [ 1032.670986][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.676209][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.681165][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.685697][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1032.690913][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1032.696825][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1032.702045][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1032.707340][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1032.712220][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1032.716997][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.721697][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.727789][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.733981][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.739200][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.744060][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.748690][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.755052][T20806] RIP: 0023:0xf7fea549 [ 1032.759118][T20806] Code: Bad RIP value. [ 1032.763183][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1032.771601][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1032.779576][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1032.787566][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1032.795541][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1032.803519][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1032.811510][T20806] Uninit was stored to memory at: [ 1032.816552][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.822281][T20806] __msan_chain_origin+0x50/0x90 [ 1032.827227][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.832364][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.837306][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.841819][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.846502][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.852584][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.858758][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.863973][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.868818][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.873314][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.879622][T20806] [ 1032.881938][T20806] Uninit was stored to memory at: [ 1032.886960][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.892683][T20806] __msan_chain_origin+0x50/0x90 [ 1032.897619][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.902746][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.907687][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.912182][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.916848][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.922903][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.929047][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1032.934246][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1032.939089][T20806] do_SYSENTER_32+0x73/0x90 [ 1032.943582][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1032.949890][T20806] [ 1032.952202][T20806] Uninit was stored to memory at: [ 1032.957218][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1032.962929][T20806] __msan_chain_origin+0x50/0x90 [ 1032.967861][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1032.972962][T20806] get_compat_msghdr+0x108/0x2b0 [ 1032.977888][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1032.982378][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1032.987043][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1032.993101][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1032.999253][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.004441][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.009284][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.013783][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.020091][T20806] [ 1033.022403][T20806] Uninit was stored to memory at: [ 1033.027422][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.033139][T20806] __msan_chain_origin+0x50/0x90 [ 1033.038068][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.043167][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.048092][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.052585][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.057264][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.063332][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.069476][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.074772][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.079615][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.084110][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.090423][T20806] [ 1033.092740][T20806] Uninit was stored to memory at: [ 1033.097765][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.103472][T20806] __msan_chain_origin+0x50/0x90 [ 1033.108399][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.113497][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.118424][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.122916][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.127589][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.133662][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.139806][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.144996][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.149835][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.154331][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.160638][T20806] [ 1033.162951][T20806] Uninit was stored to memory at: [ 1033.167967][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.173673][T20806] __msan_chain_origin+0x50/0x90 [ 1033.178609][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.183709][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.188636][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.193133][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.197828][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.203893][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.210043][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.215240][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.220084][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.224587][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.230891][T20806] [ 1033.233203][T20806] Uninit was stored to memory at: [ 1033.238266][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.243971][T20806] __msan_chain_origin+0x50/0x90 [ 1033.248908][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.254004][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.258933][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.263430][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.268094][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.274150][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.280294][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.285484][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.290324][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.294818][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.301131][T20806] [ 1033.303445][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1033.310105][T20806] do_recvmmsg+0xbf/0x22c0 [ 1033.314522][T20806] do_recvmmsg+0xbf/0x22c0 [ 1033.485147][T20806] not chained 490000 origins [ 1033.489787][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1033.498456][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.508511][T20806] Call Trace: [ 1033.511816][T20806] dump_stack+0x21c/0x280 [ 1033.516290][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1033.522041][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1033.527249][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1033.532809][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1033.538889][T20806] ? _copy_from_user+0x201/0x310 [ 1033.543837][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1033.549286][T20806] __msan_chain_origin+0x50/0x90 [ 1033.554234][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.559368][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.564326][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.568857][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1033.574070][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1033.579976][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1033.585176][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1033.590456][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1033.595207][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1033.599963][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.604645][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.610710][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.616863][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.622063][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.626906][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.631405][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.637725][T20806] RIP: 0023:0xf7fea549 [ 1033.641779][T20806] Code: Bad RIP value. [ 1033.645830][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1033.654231][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1033.662221][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.670181][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.678142][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1033.686101][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.694079][T20806] Uninit was stored to memory at: [ 1033.699095][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.704801][T20806] __msan_chain_origin+0x50/0x90 [ 1033.709729][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.714834][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.719763][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.724259][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.728927][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.734982][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.741125][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.746315][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.751156][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.755652][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.761959][T20806] [ 1033.764274][T20806] Uninit was stored to memory at: [ 1033.769299][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.775013][T20806] __msan_chain_origin+0x50/0x90 [ 1033.779945][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.785154][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.790085][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.794576][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.799246][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.805314][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.811474][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.816665][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.821507][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.826003][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.832308][T20806] [ 1033.834618][T20806] Uninit was stored to memory at: [ 1033.839724][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.845436][T20806] __msan_chain_origin+0x50/0x90 [ 1033.850367][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.855470][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.860397][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.864888][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.869564][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.875630][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.881794][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.886984][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.891829][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.896329][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.902633][T20806] [ 1033.904948][T20806] Uninit was stored to memory at: [ 1033.909964][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.915693][T20806] __msan_chain_origin+0x50/0x90 [ 1033.920624][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.925727][T20806] get_compat_msghdr+0x108/0x2b0 [ 1033.930653][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1033.935144][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1033.939812][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1033.945870][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1033.952016][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1033.957207][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1033.962052][T20806] do_SYSENTER_32+0x73/0x90 [ 1033.966553][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.972857][T20806] [ 1033.975177][T20806] Uninit was stored to memory at: [ 1033.980190][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1033.985897][T20806] __msan_chain_origin+0x50/0x90 [ 1033.990824][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1033.995923][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.000849][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.005340][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.010010][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.016087][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.022252][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.027449][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.032289][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.036792][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.043096][T20806] [ 1034.045410][T20806] Uninit was stored to memory at: [ 1034.050428][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.056133][T20806] __msan_chain_origin+0x50/0x90 [ 1034.061061][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.066160][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.071087][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.075589][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.080260][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.086315][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.092460][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.097651][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.102495][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.106988][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.113298][T20806] [ 1034.115620][T20806] Uninit was stored to memory at: [ 1034.120635][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.126343][T20806] __msan_chain_origin+0x50/0x90 [ 1034.131273][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.136375][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.141303][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.145794][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.150463][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.156520][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.162665][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.167854][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.172704][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.177220][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.183534][T20806] [ 1034.185848][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1034.192521][T20806] do_recvmmsg+0xbf/0x22c0 [ 1034.196924][T20806] do_recvmmsg+0xbf/0x22c0 [ 1034.393267][T20806] not chained 500000 origins [ 1034.397904][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1034.406575][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.416631][T20806] Call Trace: [ 1034.419950][T20806] dump_stack+0x21c/0x280 [ 1034.424298][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1034.430074][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1034.435281][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1034.440836][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1034.446917][T20806] ? _copy_from_user+0x201/0x310 [ 1034.451866][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1034.457073][T20806] __msan_chain_origin+0x50/0x90 [ 1034.462028][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.467155][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.472108][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.476636][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1034.481850][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1034.487753][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1034.492961][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1034.498254][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1034.503030][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1034.507814][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.512515][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.518583][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.524738][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.529939][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.534784][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.539285][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.545599][T20806] RIP: 0023:0xf7fea549 [ 1034.549651][T20806] Code: Bad RIP value. [ 1034.553707][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1034.562109][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1034.570073][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1034.578034][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1034.585991][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1034.593962][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1034.601932][T20806] Uninit was stored to memory at: [ 1034.606955][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.612667][T20806] __msan_chain_origin+0x50/0x90 [ 1034.617598][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.622704][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.627644][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.632135][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.636804][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.642864][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.649008][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.654203][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.659044][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.663542][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.669855][T20806] [ 1034.672170][T20806] Uninit was stored to memory at: [ 1034.677200][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.682916][T20806] __msan_chain_origin+0x50/0x90 [ 1034.687851][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.692962][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.697897][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.702394][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.707200][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.713260][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.719408][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.724601][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.729444][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.733941][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.740248][T20806] [ 1034.742562][T20806] Uninit was stored to memory at: [ 1034.747584][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.753303][T20806] __msan_chain_origin+0x50/0x90 [ 1034.758234][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.763337][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.768264][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.772754][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.777424][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.783483][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.789626][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.794814][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.799656][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.804150][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.810471][T20806] [ 1034.812788][T20806] Uninit was stored to memory at: [ 1034.817805][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.823515][T20806] __msan_chain_origin+0x50/0x90 [ 1034.828443][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.833543][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.838468][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.842984][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.847650][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.853715][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.859862][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.865056][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.869993][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.874490][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.880797][T20806] [ 1034.883112][T20806] Uninit was stored to memory at: [ 1034.888138][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.893854][T20806] __msan_chain_origin+0x50/0x90 [ 1034.898796][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.903906][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.908844][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.913335][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.918003][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.924059][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1034.930202][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1034.935393][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1034.940232][T20806] do_SYSENTER_32+0x73/0x90 [ 1034.944727][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.951031][T20806] [ 1034.953344][T20806] Uninit was stored to memory at: [ 1034.958359][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1034.964064][T20806] __msan_chain_origin+0x50/0x90 [ 1034.968989][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1034.974090][T20806] get_compat_msghdr+0x108/0x2b0 [ 1034.979017][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1034.983509][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1034.988180][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1034.994237][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.000398][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.005592][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.010439][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.014943][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.021259][T20806] [ 1035.023574][T20806] Uninit was stored to memory at: [ 1035.028590][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.034300][T20806] __msan_chain_origin+0x50/0x90 [ 1035.039228][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.044325][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.049250][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.053742][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.058422][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.064481][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.070626][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.075816][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.080658][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.085161][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.091484][T20806] [ 1035.093800][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1035.100548][T20806] do_recvmmsg+0xbf/0x22c0 [ 1035.104952][T20806] do_recvmmsg+0xbf/0x22c0 [ 1035.351116][T20806] not chained 510000 origins [ 1035.355756][T20806] CPU: 1 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1035.364414][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.374459][T20806] Call Trace: [ 1035.377807][T20806] dump_stack+0x21c/0x280 [ 1035.382151][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1035.387884][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1035.393085][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1035.398626][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1035.404688][T20806] ? _copy_from_user+0x201/0x310 [ 1035.409619][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1035.414812][T20806] __msan_chain_origin+0x50/0x90 [ 1035.419756][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.424874][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.429811][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.434320][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1035.439514][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1035.445402][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1035.450599][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1035.455879][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1035.460633][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1035.465391][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.470075][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.476143][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.482414][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.487614][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.492460][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.496965][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.503283][T20806] RIP: 0023:0xf7fea549 [ 1035.507334][T20806] Code: Bad RIP value. [ 1035.511388][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1035.519787][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1035.527753][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.535717][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.543683][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1035.551645][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.559618][T20806] Uninit was stored to memory at: [ 1035.564642][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.570354][T20806] __msan_chain_origin+0x50/0x90 [ 1035.575285][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.580387][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.585313][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.589805][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.594473][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.600532][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.606677][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.611869][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.616736][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.621240][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.627560][T20806] [ 1035.629877][T20806] Uninit was stored to memory at: [ 1035.634899][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.640611][T20806] __msan_chain_origin+0x50/0x90 [ 1035.645542][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.650644][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.655597][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.660092][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.664762][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.670822][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.676990][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.682186][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.687031][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.691536][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.697844][T20806] [ 1035.700162][T20806] Uninit was stored to memory at: [ 1035.705181][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.710893][T20806] __msan_chain_origin+0x50/0x90 [ 1035.715822][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.720923][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.725852][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.730347][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.735016][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.741076][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.747223][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.752414][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.757257][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.761752][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.768069][T20806] [ 1035.770394][T20806] Uninit was stored to memory at: [ 1035.775419][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.781140][T20806] __msan_chain_origin+0x50/0x90 [ 1035.786074][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.791187][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.796118][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.800618][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.805293][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.811350][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.817505][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.822698][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.827557][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.832062][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.838374][T20806] [ 1035.840694][T20806] Uninit was stored to memory at: [ 1035.845719][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.851433][T20806] __msan_chain_origin+0x50/0x90 [ 1035.856367][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.861472][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.866402][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.870906][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.875578][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.881637][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.887784][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.892973][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.897814][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.902309][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.908612][T20806] [ 1035.910926][T20806] Uninit was stored to memory at: [ 1035.915940][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.921649][T20806] __msan_chain_origin+0x50/0x90 [ 1035.926576][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1035.931676][T20806] get_compat_msghdr+0x108/0x2b0 [ 1035.936605][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1035.941100][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1035.945781][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.951851][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.958010][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1035.963204][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1035.968048][T20806] do_SYSENTER_32+0x73/0x90 [ 1035.972633][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.978938][T20806] [ 1035.981252][T20806] Uninit was stored to memory at: [ 1035.986268][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1035.991990][T20806] __msan_chain_origin+0x50/0x90 [ 1035.996928][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.002036][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.006969][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.011464][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.016133][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.022193][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.028341][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.033554][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.038396][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.042897][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.049205][T20806] [ 1036.051525][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1036.058190][T20806] do_recvmmsg+0xbf/0x22c0 [ 1036.062595][T20806] do_recvmmsg+0xbf/0x22c0 [ 1036.231727][T20806] not chained 520000 origins [ 1036.236364][T20806] CPU: 1 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1036.245037][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.255208][T20806] Call Trace: [ 1036.258520][T20806] dump_stack+0x21c/0x280 [ 1036.262868][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1036.268617][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1036.273824][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1036.279386][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1036.285463][T20806] ? _copy_from_user+0x201/0x310 [ 1036.290414][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1036.295636][T20806] __msan_chain_origin+0x50/0x90 [ 1036.300595][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.305739][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.310694][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.315223][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1036.320434][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1036.326337][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1036.331548][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1036.336841][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1036.341606][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1036.346378][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.351079][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.357161][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.363323][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.368535][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.373391][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.377909][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.384232][T20806] RIP: 0023:0xf7fea549 [ 1036.388290][T20806] Code: Bad RIP value. [ 1036.392352][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1036.400766][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1036.408740][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1036.416716][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1036.424689][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1036.432671][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1036.440663][T20806] Uninit was stored to memory at: [ 1036.445713][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1036.451437][T20806] __msan_chain_origin+0x50/0x90 [ 1036.456380][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.461512][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.466455][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.470964][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.475653][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.481731][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.487892][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.493095][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.497950][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.502458][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.508776][T20806] [ 1036.511097][T20806] Uninit was stored to memory at: [ 1036.516136][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1036.521860][T20806] __msan_chain_origin+0x50/0x90 [ 1036.526805][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.531920][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.536856][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.541354][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.546025][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.552173][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.558318][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.563509][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.568351][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.572848][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.579157][T20806] [ 1036.581472][T20806] Uninit was stored to memory at: [ 1036.586492][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1036.592206][T20806] __msan_chain_origin+0x50/0x90 [ 1036.597134][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.602354][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.607283][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.611776][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.616549][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.622608][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.628763][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.633962][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.638810][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.643308][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.649619][T20806] [ 1036.651932][T20806] Uninit was stored to memory at: [ 1036.656951][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1036.662659][T20806] __msan_chain_origin+0x50/0x90 [ 1036.667596][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.672706][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.677638][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.682131][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.686800][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.692858][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.699005][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.704196][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.709041][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.713551][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.719863][T20806] [ 1036.722176][T20806] Uninit was stored to memory at: [ 1036.727195][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1036.733027][T20806] __msan_chain_origin+0x50/0x90 [ 1036.737955][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.743058][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.747985][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.752479][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.757149][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.763208][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.769354][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.774544][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.779384][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.784107][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.790426][T20806] [ 1036.792739][T20806] Uninit was stored to memory at: [ 1036.797844][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1036.803571][T20806] __msan_chain_origin+0x50/0x90 [ 1036.808517][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.813632][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.818558][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.823051][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.827727][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.833786][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.839930][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.845124][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.849972][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.854469][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.860863][T20806] [ 1036.863178][T20806] Uninit was stored to memory at: [ 1036.868317][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1036.874027][T20806] __msan_chain_origin+0x50/0x90 [ 1036.878959][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1036.884057][T20806] get_compat_msghdr+0x108/0x2b0 [ 1036.888984][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1036.893477][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1036.898145][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1036.904203][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1036.910347][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1036.915536][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1036.920376][T20806] do_SYSENTER_32+0x73/0x90 [ 1036.924871][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.931175][T20806] [ 1036.933490][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1036.940152][T20806] do_recvmmsg+0xbf/0x22c0 [ 1036.944557][T20806] do_recvmmsg+0xbf/0x22c0 [ 1037.100261][T20806] not chained 530000 origins [ 1037.104902][T20806] CPU: 1 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1037.113571][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1037.123634][T20806] Call Trace: [ 1037.126940][T20806] dump_stack+0x21c/0x280 [ 1037.131289][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1037.137040][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1037.142248][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1037.147808][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1037.153889][T20806] ? _copy_from_user+0x201/0x310 [ 1037.158844][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1037.164046][T20806] __msan_chain_origin+0x50/0x90 [ 1037.168993][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.174128][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.179208][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.183738][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1037.188980][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1037.194906][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1037.200118][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1037.205417][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1037.210204][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1037.214982][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.219685][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.225782][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.231950][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.237167][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.242030][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.246543][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.252874][T20806] RIP: 0023:0xf7fea549 [ 1037.256929][T20806] Code: Bad RIP value. [ 1037.261000][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1037.269402][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1037.277367][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1037.285330][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1037.293292][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1037.301271][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1037.309241][T20806] Uninit was stored to memory at: [ 1037.314264][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1037.319974][T20806] __msan_chain_origin+0x50/0x90 [ 1037.324902][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.330004][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.334948][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.339459][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.344125][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.350183][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.356334][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.361526][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.366367][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.370861][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.377167][T20806] [ 1037.379480][T20806] Uninit was stored to memory at: [ 1037.384495][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1037.390202][T20806] __msan_chain_origin+0x50/0x90 [ 1037.395130][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.400230][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.405156][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.409648][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.414322][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.420380][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.426611][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.431814][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.436657][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.441154][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.447458][T20806] [ 1037.449772][T20806] Uninit was stored to memory at: [ 1037.454797][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1037.460510][T20806] __msan_chain_origin+0x50/0x90 [ 1037.465441][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.470546][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.475479][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.479980][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.484652][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.490714][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.496862][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.502057][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.506897][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.511395][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.517708][T20806] [ 1037.520021][T20806] Uninit was stored to memory at: [ 1037.525039][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1037.530747][T20806] __msan_chain_origin+0x50/0x90 [ 1037.535675][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.540777][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.545704][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.550195][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.554863][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.560920][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.567068][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.572257][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.577097][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.581591][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.587897][T20806] [ 1037.590210][T20806] Uninit was stored to memory at: [ 1037.595227][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1037.600939][T20806] __msan_chain_origin+0x50/0x90 [ 1037.605866][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.610973][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.615901][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.620411][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.625091][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.631173][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.637325][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.642516][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.647355][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.651850][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.658158][T20806] [ 1037.660481][T20806] Uninit was stored to memory at: [ 1037.665502][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1037.671212][T20806] __msan_chain_origin+0x50/0x90 [ 1037.676139][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.681241][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.686168][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.690659][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.695325][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.701379][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.707532][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.712718][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.717555][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.722049][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.728355][T20806] [ 1037.730680][T20806] Uninit was stored to memory at: [ 1037.735698][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1037.741409][T20806] __msan_chain_origin+0x50/0x90 [ 1037.746339][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1037.751445][T20806] get_compat_msghdr+0x108/0x2b0 [ 1037.756379][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1037.760869][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1037.765541][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1037.771600][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1037.777748][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1037.782940][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1037.787780][T20806] do_SYSENTER_32+0x73/0x90 [ 1037.792272][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.798576][T20806] [ 1037.800891][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1037.807662][T20806] do_recvmmsg+0xbf/0x22c0 [ 1037.812066][T20806] do_recvmmsg+0xbf/0x22c0 [ 1038.065728][T20806] not chained 540000 origins [ 1038.070478][T20806] CPU: 0 PID: 20806 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1038.079122][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.089157][T20806] Call Trace: [ 1038.092430][T20806] dump_stack+0x21c/0x280 [ 1038.096741][T20806] kmsan_internal_chain_origin+0x6f/0x130 [ 1038.102448][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1038.107631][T20806] ? kmsan_set_origin_checked+0x95/0xf0 [ 1038.113161][T20806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1038.119296][T20806] ? _copy_from_user+0x201/0x310 [ 1038.124254][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1038.129569][T20806] __msan_chain_origin+0x50/0x90 [ 1038.134488][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.139587][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.144507][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.149005][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1038.154318][T20806] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1038.160198][T20806] ? kmsan_get_metadata+0x116/0x180 [ 1038.165404][T20806] ? __msan_poison_alloca+0xf0/0x120 [ 1038.170669][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1038.175411][T20806] ? __sys_recvmmsg+0xbb/0x610 [ 1038.180173][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.184878][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.190932][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.197070][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.202268][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.207100][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.211580][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.217881][T20806] RIP: 0023:0xf7fea549 [ 1038.221919][T20806] Code: Bad RIP value. [ 1038.225962][T20806] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1038.234348][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1038.242295][T20806] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1038.250244][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1038.258191][T20806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1038.266140][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1038.274094][T20806] Uninit was stored to memory at: [ 1038.279099][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1038.284793][T20806] __msan_chain_origin+0x50/0x90 [ 1038.289706][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.294793][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.299705][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.304183][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.308835][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.314878][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.321025][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.326200][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.331115][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.335597][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.341891][T20806] [ 1038.344191][T20806] Uninit was stored to memory at: [ 1038.349190][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1038.354883][T20806] __msan_chain_origin+0x50/0x90 [ 1038.359811][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.364898][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.369814][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.374292][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.378946][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.384986][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.391115][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.396288][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.401113][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.405592][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.411888][T20806] [ 1038.414189][T20806] Uninit was stored to memory at: [ 1038.419190][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1038.424889][T20806] __msan_chain_origin+0x50/0x90 [ 1038.429803][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.434889][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.439799][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.444281][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.448937][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.454980][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.461111][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.466285][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.471114][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.475591][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.481883][T20806] [ 1038.484185][T20806] Uninit was stored to memory at: [ 1038.489185][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1038.494879][T20806] __msan_chain_origin+0x50/0x90 [ 1038.499794][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.504878][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.509791][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.514268][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.518922][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.524964][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.531107][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.536281][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.541119][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.545598][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.551907][T20806] [ 1038.554207][T20806] Uninit was stored to memory at: [ 1038.559216][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1038.564910][T20806] __msan_chain_origin+0x50/0x90 [ 1038.569825][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.574911][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.579823][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.584301][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.588955][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.595011][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.601140][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.606327][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.611163][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.615643][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.621937][T20806] [ 1038.624253][T20806] Uninit was stored to memory at: [ 1038.629258][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1038.634954][T20806] __msan_chain_origin+0x50/0x90 [ 1038.639866][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.644955][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.649869][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.654369][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.659025][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.665079][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.671207][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.676387][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.681215][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.685706][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.692001][T20806] [ 1038.694319][T20806] Uninit was stored to memory at: [ 1038.699321][T20806] kmsan_internal_chain_origin+0xad/0x130 [ 1038.705014][T20806] __msan_chain_origin+0x50/0x90 [ 1038.709928][T20806] __get_compat_msghdr+0x6db/0x9d0 [ 1038.715020][T20806] get_compat_msghdr+0x108/0x2b0 [ 1038.719930][T20806] do_recvmmsg+0xdbb/0x22c0 [ 1038.724408][T20806] __sys_recvmmsg+0x5dd/0x610 [ 1038.729062][T20806] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1038.735104][T20806] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1038.741235][T20806] __do_fast_syscall_32+0x2af/0x480 [ 1038.746425][T20806] do_fast_syscall_32+0x6b/0xd0 [ 1038.751248][T20806] do_SYSENTER_32+0x73/0x90 [ 1038.755729][T20806] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.762023][T20806] [ 1038.764331][T20806] Local variable ----msg_sys@do_recvmmsg created at: [ 1038.770983][T20806] do_recvmmsg+0xbf/0x22c0 [ 1038.775374][T20806] do_recvmmsg+0xbf/0x22c0 18:50:30 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 18:50:30 executing program 5: 18:50:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x34) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r2, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x34) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 18:50:30 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000780)={0x0}}, 0x0) 18:50:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) 18:50:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1039.149679][T20873] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 18:50:31 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 18:50:31 executing program 5: r0 = creat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 18:50:31 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 18:50:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) dup3(r0, r1, 0x0) getrandom(&(0x7f0000000700)=""/4096, 0x1000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 18:50:31 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x6, 0x0) write$P9_RCLUNK(r0, 0x0, 0x2c9) 18:50:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x40000001) tkill(r2, 0x1000000000016) 18:50:31 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000680)={&(0x7f00000000c0), 0xc, &(0x7f0000000640)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:50:31 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r1, r0, 0x0) ioctl$TCGETX(r0, 0x5425, 0x0) 18:50:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) dup2(r0, r1) setsockopt(r1, 0x1, 0x6, &(0x7f0000001880)="6afca3ab", 0x4) 18:50:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) 18:50:32 executing program 1: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() write$P9_RRENAME(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 18:50:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) r2 = gettid() socket$inet6_udp(0xa, 0x2, 0x0) tkill(r2, 0x1000000000016) 18:50:32 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 18:50:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x21, 0x0, &(0x7f00000000c0)) 18:50:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x1f, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000008c0), 0x4) 18:50:32 executing program 0: r0 = epoll_create(0x5) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 18:50:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000011c0), 0x4) 18:50:33 executing program 2: splice(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x4) 18:50:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RFLUSH(r2, 0x0, 0x0) 18:50:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000500), 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) tkill(r1, 0x1000000000016) 18:50:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x5450, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 18:50:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:50:34 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r0, &(0x7f0000001740)={0x0, ""/4105}, 0x1011, 0x1, 0x0) 18:50:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34}, 0x34}}, 0x0) sendto$inet(r1, &(0x7f00000002c0)="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", 0x68d, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 18:50:34 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x2c7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r0, 0x8953, &(0x7f0000000040)) 18:50:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x29, 0x18, 0x0, 0x54) 18:50:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x2, 0x0, &(0x7f0000001380)) 18:50:34 executing program 5: socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) lsetxattr$security_evm(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@v1={0x2, "2578d2"}, 0x4, 0x2) 18:50:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 18:50:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x5450, 0x0) 18:50:35 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 18:50:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:50:35 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 18:50:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 18:50:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000180)) 18:50:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 18:50:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0xd, 0x0, &(0x7f0000000040)) 18:50:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980)='/proc/thread-self\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 18:50:36 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f00000000c0)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 18:50:36 executing program 2: r0 = memfd_create(&(0x7f0000000100)='^\xa9', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x11, 0x0, &(0x7f00000000c0)) 18:50:36 executing program 4: r0 = socket(0xa, 0x3, 0x1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xf3, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x54}}, 0x0) 18:50:36 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$inet_mreq(r2, 0x0, 0x0, 0x0, 0x0) 18:50:36 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:50:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_SIOCBRADDBR(r1, 0x541b, &(0x7f0000000040)='veth0_macvtap\x00') 18:50:37 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) 18:50:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0), 0xfd56, &(0x7f0000000400)={0x0}}, 0x5ad0d79c3bfb01db) 18:50:38 executing program 1: r0 = socket$inet(0x2, 0x8000000003, 0x21) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, r1) write$P9_RREADLINK(r2, 0x0, 0x20480) 18:50:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) tkill(r2, 0x401004000000016) 18:50:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000007c0)='/dev/vcsa#\x00', 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 18:50:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 18:50:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:50:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x20000088) 18:50:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003240)) 18:50:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @empty}}) 18:50:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x29, 0x46, 0x0, 0x0) 18:50:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:50:42 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) write$binfmt_misc(r0, 0x0, 0x0) 18:50:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) [ 1050.635676][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 18:50:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000cc0)='/dev/loop#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:50:42 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:50:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r1 = socket$inet(0x10, 0x2, 0x0) dup2(r1, r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:50:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x35, &(0x7f0000000300)={0x0}}, 0x0) 18:50:43 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') ioctl$GIO_UNIMAP(r0, 0x5427, 0x0) 18:50:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x15, 0x0, &(0x7f0000000140)) 18:50:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) 18:50:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:50:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) write$P9_RLERRORu(r0, &(0x7f0000000600)={0x17, 0x7, 0x0, {{0xa, '/dev/ptmx\x00'}}}, 0x17) 18:50:43 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='G', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() tkill(r2, 0x14) sendmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) 18:50:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 18:50:43 executing program 2: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 18:50:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x3, 0x0, 0x0) 18:50:44 executing program 0: r0 = memfd_create(&(0x7f0000000180)='/dev/ptmx\x00', 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5451, 0x0) 18:50:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x20000000) 18:50:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x5451, 0x0) 18:50:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() sendmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000c00)="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", 0xd9a}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x0) tkill(r2, 0x1000000000016) 18:50:44 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x5451, 0x0) 18:50:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000100)) 18:50:44 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:50:44 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:50:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 18:50:45 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setparam(r1, &(0x7f0000000040)) 18:50:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$KDSKBMETA(r1, 0x5427, 0x0) 18:50:45 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x2, &(0x7f00000002c0)) 18:50:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 18:50:45 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0x29, 0x0, 0x8800) 18:50:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, 0x0) 18:50:46 executing program 1: r0 = eventfd(0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@dev, @local}, 0x8) 18:50:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 18:50:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x12, 0x0, 0x0) 18:50:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 18:50:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000001340)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:50:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') getdents64(r0, &(0x7f0000000100)=""/190, 0xbe) 18:50:47 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:50:47 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) dup2(r0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:50:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0xd, 0x0, &(0x7f00000003c0)) 18:50:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 18:50:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000087c6c75445db073b8000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001300)=""/4073, 0xfe9, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) 18:50:47 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 1056.214353][ T29] audit: type=1804 audit(1598986248.050:80): pid=21259 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir586796333/syzkaller.jks9Lr/565/file0" dev="sda1" ino=15764 res=1 [ 1056.354026][ T29] audit: type=1804 audit(1598986248.140:81): pid=21259 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir586796333/syzkaller.jks9Lr/565/file0" dev="sda1" ino=15764 res=1 18:50:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) ioctl$CHAR_RAW_GETSIZE64(r1, 0x80081272, &(0x7f0000000000)) 18:50:48 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 18:50:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x108) 18:50:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x20000000) 18:50:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0x1b, &(0x7f0000006f80)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 18:50:48 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001640)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000040)) 18:50:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r0, &(0x7f0000002d00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 18:50:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0xd) dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) 18:50:48 executing program 3: symlinkat(&(0x7f0000002480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000002680)='./file0\x00', 0x0, 0x0) 18:50:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) tkill(r1, 0x1000100000016) 18:50:49 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4$packet(r1, 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(r2, 0x0, 0x0) 18:50:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000020000000ad32c6de010000000000000600"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001280)=""/4082, 0xff2, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) 18:50:49 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:50:49 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x5450, 0x0) 18:50:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:50:49 executing program 2: getgroups(0x100000000, 0x0) 18:50:49 executing program 4: r0 = eventfd(0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="796520b2550000ed"], 0x8) r1 = gettid() r2 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) write$9p(r2, &(0x7f00000000c0)="a1221b05f040d2a8", 0x8) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101002, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 18:50:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000001600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) 18:50:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x8980, 0x0) 18:50:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) 18:50:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 18:50:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffee6, &(0x7f0000000180)={0x0, 0xe4}}, 0x11) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) 18:50:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf) 18:50:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000380)=0x1f6) dup2(r0, r1) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) 18:50:51 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x2, &(0x7f0000000200)={'virt_wifi0\x00'}) 18:50:51 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5421, 0x400000) 18:50:51 executing program 0: r0 = open(&(0x7f00000009c0)='./file0\x00', 0x40440, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0xd, 0x0, 0x0) 18:50:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={0x0}}, 0x0) 18:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, 0x0, 0x0) 18:50:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5450, 0x0) 18:50:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 18:50:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010811, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) tkill(r2, 0x1000000000016) 18:50:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0x200000d4, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:50:51 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 18:50:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() write$P9_RAUTH(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) tkill(r2, 0x1000000000016) 18:50:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) 18:50:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101006) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCGETA(r1, 0x5405, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:50:52 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), 0x10) 18:50:52 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0x1787c1c2242707b3) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = dup3(r1, r0, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) 18:50:52 executing program 5: memfd_create(&(0x7f00000002c0)='\x00\xc0\xce\x9b\x0f\xca`\xcc\xbd\x17\x83lk9\xb5O#p\xa1c\xee\xab\xe7\xd4\xbb\"\x96\\h\xce\b\xd9\xd1\xb2\x83\r\xd0\f\n\xdao\xe3Z\x10', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r1 = memfd_create(&(0x7f0000000180)='K\xde\xeb\xc2}]b\x95m|^\xee0z\x85\xb5\xb5S\xf4P\x1bG\x8c$\xee#9\xda\xf7\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\xf4\x1b\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06,f\x9f\xba\x1c\x90\xd2w\xb6\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\xa1\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\x99\xc9\xcb\x99\xa6\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde8\xec\x00\xcf\x06o\xa6\xd3kv\xa7i*\x87\xb8W\xd3\xa4', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) fsync(r2) 18:50:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000040)='{vmnet1posix_acl_access@mime_type\x00', 0x0) write$binfmt_aout(r0, 0x0, 0x0) 18:50:52 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:50:52 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:50:52 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000021c000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10) 18:50:52 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:50:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 18:50:53 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1061.408532][T21410] mmap: syz-executor.3 (21410) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 18:50:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) dup2(r0, r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:50:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8040) 18:50:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x5421, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) 18:50:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) 18:50:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) dup2(r1, r2) setsockopt$inet_tcp_buf(r2, 0x6, 0x3, &(0x7f0000000000)="6125c9c2", 0x4) 18:50:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) fcntl$F_SET_FILE_RW_HINT(r1, 0x3, 0x0) 18:50:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) write$P9_RWSTAT(r0, 0x0, 0x0) 18:50:54 executing program 5: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 18:50:54 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)) 18:50:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000001600008c8200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$TCGETA(r1, 0x5405, 0x0) 18:50:54 executing program 3: r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010011, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast1}, {}, {0x2, 0x0, @rand_addr=0xd75d}}) tkill(r0, 0x1000000000016) 18:50:54 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1e8}}, 0x0) 18:50:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 18:50:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18:50:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001400), 0x8) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 18:50:56 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 18:50:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0) 18:50:56 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5450, 0x0) 18:50:56 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$cgroup_type(r0, 0x0, 0x0) 18:50:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) setsockopt$inet_buf(r1, 0x0, 0x17, 0x0, 0x0) 18:50:56 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:50:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) 18:50:56 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:50:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp], 0x20000726) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:50:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, 0x0) 18:50:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) 18:50:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$BLKBSZGET(r1, 0x80081270, 0x0) 18:50:57 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000100)) 18:50:57 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 18:50:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$nl_crypto(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4800a) 18:50:57 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) fchmod(r2, 0x0) 18:50:58 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) syncfs(r0) 18:50:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) flock(r0, 0xc) 18:50:58 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) close(r0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xf, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, 0x0}, 0x1f6) 18:50:58 executing program 0: r0 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TCSETX(r0, 0x5450, 0x0) 18:50:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0x24000, 0x4) recvfrom$inet6(r0, 0x0, 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r1, &(0x7f0000000040)="8b80", 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 18:50:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101341, 0x0) write$cgroup_int(r0, 0x0, 0x0) 18:50:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1, 0x0) tkill(r2, 0x1000000000016) 18:50:59 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) getsockname$inet6(r0, 0x0, &(0x7f0000000f00)) 18:50:59 executing program 2: r0 = creat(&(0x7f0000001900)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:50:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='environ\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 18:50:59 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xb90ddf4273871bc5, 0x0) write$eventfd(r0, 0x0, 0x0) 18:50:59 executing program 0: r0 = epoll_create(0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) epoll_pwait(r1, &(0x7f0000000100), 0x1, 0x0, 0x0, 0xfffffff3) 18:50:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000001600)=@ethernet, 0x80) 18:50:59 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKBSZGET(r0, 0x5451, 0x0) 18:50:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) getpeername$inet(r1, 0x0, &(0x7f00000000c0)) 18:51:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) 18:51:00 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) 18:51:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 18:51:01 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x42300, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xc000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4815}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x4c}}, 0x40000) ioctl$TIOCGSID(r0, 0x802c542a, &(0x7f00000001c0)=0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000080)={0x67446698, 0x0, 0x8000, 0x4, 0x2, "d598382e809cf0d9a8845277d602916b867a2e4a300dc8021b4c612fb9687064d228e764f31c9f264d95c57999cdfd1c2cf597d22dba47cc9d67977da04929ce61c27708e05768712317fd0200de4bcfca1fa1caac08bd6f5305c17c0ccd3921bb660d92f49869d214ab38c8286d7750bb6a63da5e67256258a8a59b0553dbf6a590dbe14dc84f6c17f327e32482d0c8fffcb13a0c036a0db5213dc351ce04d2b5667c4ba5be0966"}, 0xb8) tkill(r3, 0x0) 18:51:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003000000c817fbf192c9b52200000107080000000000000000000000000000000000000000000000004e3fa56eed6dbfc55d3d3555050fc60ed628918ad8e16d0215e057df1d5cfdac28de61681efcbcae8acad54adea0668447720c16d294d6a166cd676d132ffb45c053abd979d47218bb438259a91d320560ec36de1928f4a8e231b4b27bbf4c8a5bb629c96aa38af80f57f573f5b4cf62b9f1c953891d0fde67ba4e9d18c4709b9960b8e87d1602714bdc2733d5690e6eed09c96eb4e4cd7a2f7d250c58828b9e2ba322510a9794411584206b4707672b3eceb145"], 0x28) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) dup2(r1, r0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 18:51:01 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r1) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 18:51:01 executing program 5: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000440)) 18:51:01 executing program 2: r0 = epoll_create1(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 18:51:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x200000100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x22, 0x0, &(0x7f0000000000)=0xcf73f6a242f7cdc9) 18:51:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 18:51:01 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 18:51:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:51:02 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:51:02 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x550d, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cd7af9ffa0993c93152461ca5a38d9d579d0d5"}) 18:51:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x1a, 0x0, &(0x7f0000000080)) 18:51:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x3e, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x14, 0x0, 0x0) 18:51:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000440)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$packet_tx_ring(r1, 0x29, 0x21, 0x0, 0x0) 18:51:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FS_IOC_GETFSLABEL(r2, 0x5411, &(0x7f0000000000)) 18:51:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$CHAR_RAW_IOMIN(r1, 0x1278, 0x0) 18:51:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r0, 0x10e, 0x5, 0x0, 0x0) 18:51:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 18:51:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RATTACH(r2, 0x0, 0xfa4459cc) close(r0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) tkill(r1, 0x1000000000013) 18:51:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000005340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 18:51:03 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0) 18:51:04 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000300), 0x20) 18:51:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\b'], 0x108}}, 0x0) tkill(r2, 0x1000000000016) 18:51:04 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$LOOP_GET_STATUS(r0, 0x5452, &(0x7f0000000180)) 18:51:05 executing program 1: r0 = eventfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) dup2(r2, r3) write$P9_RMKNOD(r3, 0x0, 0x0) 18:51:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5421, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 18:51:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') ioctl$sock_inet_SIOCRTMSG(r0, 0x5450, 0x0) 18:51:08 executing program 4: vmsplice(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 18:51:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:51:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x29, 0x46, 0x0, 0x0) 18:51:08 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10040, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xa, 0x0, &(0x7f0000000000)) 18:51:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0xe, 0x0, &(0x7f00000000c0)) 18:51:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) getsockname(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) dup2(r0, r4) setsockopt$inet_mreqsrc(r4, 0x0, 0x2, &(0x7f0000000180)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc) 18:51:09 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 18:51:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSBRK(r0, 0x5409, 0x0) [ 1077.428932][T21719] sock: process `syz-executor.1' is using obsolete getsockopt SO_BSDCOMPAT 18:51:09 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getsockname$inet(r3, 0x0, &(0x7f00000000c0)) 18:51:09 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 18:51:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = memfd_create(&(0x7f0000000000)='%,wlan1\'eth1posix_acl_accessvmnet1eth0cpusetvboxnet1\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 18:51:09 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) fadvise64(r4, 0x0, 0x0, 0x0) 18:51:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) dup2(r1, r2) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) 18:51:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) fcntl$getown(r0, 0x9) 18:51:10 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000080)=""/127) 18:51:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r0, r1) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 18:51:10 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000600)=""/4096, 0x1000) getdents64(r0, &(0x7f0000000040), 0x0) 18:51:10 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) fchownat(r0, &(0x7f00000029c0)='\x00', 0x0, 0x0, 0x1000) 18:51:10 executing program 5: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:51:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 18:51:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x8000000000001011}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000100), 0x14) r4 = dup(r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 18:51:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x80d4) 18:51:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) dup3(r0, r1, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) 18:51:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x4b36) 18:51:11 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x21d, 0xffb6) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffe1) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:51:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) [ 1079.530173][T21778] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:51:12 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000000)=0x9) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2f5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r3 = msgget$private(0x0, 0x3e) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f40)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) r6 = getegid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) r9 = getpgid(0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000500)={{0x0, r5, r6, r7, r8, 0x14, 0x7f}, 0x4, 0x6, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff, r9, 0xff3a}) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x14, 0x0) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f00000006c0), &(0x7f0000000700)=0x4) process_vm_readv(r9, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/71, 0x47}, {&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f00000008c0)=""/24, 0x18}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f0000000a00)=""/167, 0xa7}, {&(0x7f0000000ac0)=""/120, 0x78}, {&(0x7f0000000b40)=""/76, 0x4c}], 0x7, &(0x7f0000000e00)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/92, 0x5c}, {&(0x7f0000000d00)=""/222, 0xde}], 0x3, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000e40)={@mcast2, @local, @empty, 0x4, 0x81, 0x1ff, 0x900, 0x1, 0x200, r4}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0xc0}, 0x80000d4) bind(r2, &(0x7f00000010c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x80) 18:51:12 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) 18:51:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket(0xa, 0x2, 0x0) tkill(r2, 0x1000000000016) 18:51:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x5452, &(0x7f0000000240)) 18:51:12 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) flistxattr(r3, 0x0, 0x0) 18:51:12 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 18:51:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40040) 18:51:12 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) ioctl$PIO_FONTX(r1, 0x541b, &(0x7f0000000540)={0x0, 0x0, 0x0}) 18:51:13 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(r0, 0x127d, 0x0) 18:51:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) 18:51:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) getpeername(r0, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000005c0)=0x80) dup2(r0, r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:51:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x22, 0x0, 0xfffffffffffffeb8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 18:51:17 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) futimesat(r0, 0x0, 0x0) 18:51:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)) 18:51:17 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x540c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) 18:51:17 executing program 3: r0 = creat(&(0x7f0000000800)='./file0\x00', 0x0) fgetxattr(r0, &(0x7f0000000980)=@random={'osx.', '\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, 0x0, 0x0) 18:51:17 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:51:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) 18:51:18 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x103082, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 18:51:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000007500)) 18:51:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_open_pts(r1, 0x0) 18:51:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x5421, &(0x7f0000000440)=""/213) 18:51:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:51:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xdc4b) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 18:51:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) 18:51:18 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) [ 1086.998094][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 18:51:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x541b, 0x20000000) 18:51:19 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 18:51:19 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000280)=""/272) 18:51:19 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 18:51:19 executing program 3: r0 = timerfd_create(0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x5450, 0x0) 18:51:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RATTACH(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) tkill(r2, 0x1000000000016) 18:51:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x25f3d496bbfdaf97}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) 18:51:19 executing program 2: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) 18:51:19 executing program 3: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r2 = gettid() tkill(r2, 0x16) 18:51:20 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)) 18:51:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5b}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) dup3(r4, r3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000001540)=0x8, 0x4) tkill(r2, 0x1000000000016) 18:51:20 executing program 1: r0 = inotify_init() close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0), 0x10) 18:51:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000012480)={0x0, 0x0, &(0x7f0000012440)={0x0}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) 18:51:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8913, &(0x7f0000005700)={'sit0\x00', 0x0}) 18:51:20 executing program 5: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x32, 0x0, &(0x7f0000000240)) 18:51:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) tkill(r1, 0x7) 18:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:51:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x0) 18:51:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x80) recvfrom$packet(r4, 0x0, 0xad, 0x0, 0x0, 0x45) 18:51:21 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) pipe2(0x0, 0x0) stat(&(0x7f00000006c0)='.\x00', &(0x7f0000000700)) setfsuid(0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) [ 1089.482167][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1089.546840][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:51:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004011) 18:51:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 18:51:22 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:51:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 18:51:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) dup3(r2, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x8903, &(0x7f0000000080)) 18:51:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0xffffffffffffffff) 18:51:23 executing program 0: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:51:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 18:51:27 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x22401, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 18:51:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x7, 0x4) 18:51:27 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:51:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) getrandom(&(0x7f0000000080)=""/4121, 0x1019, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) 18:51:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x22, 0x0, 0x0) 18:51:27 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x800) 18:51:27 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x41, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:51:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)) mprotect(&(0x7f0000278000/0x4000)=nil, 0x4000, 0x0) 18:51:27 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454ca, 0x400000) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/67) 18:51:27 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24004fef, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 1095.876351][ T29] audit: type=1804 audit(1598986287.716:82): pid=22033 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir586796333/syzkaller.jks9Lr/601/file0" dev="sda1" ino=16367 res=1 18:51:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$addseals(r0, 0x2, 0x0) [ 1096.028002][ T29] audit: type=1804 audit(1598986287.756:83): pid=22030 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir586796333/syzkaller.jks9Lr/601/file0" dev="sda1" ino=16367 res=1 18:51:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:51:28 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:51:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) ioctl$KDFONTOP_SET(r1, 0x4b60, 0x0) 18:51:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4008001, &(0x7f0000000280)={0xa, 0x4e20}, 0x1c) write$P9_RSETATTR(r0, 0x0, 0x0) 18:51:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 18:51:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) 18:51:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) 18:51:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 18:51:30 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002300)) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:51:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001280)='/dev/loop-control\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:51:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000300)) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0x0) 18:51:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 18:51:30 executing program 2: modify_ldt$write(0x1, &(0x7f0000000080), 0x0) 18:51:30 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$P9_RFLUSH(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x3d, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r3, r1) tkill(r0, 0x1000000000016) 18:51:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 18:51:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 18:51:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f0000000280)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) dup2(r1, r0) write$P9_RMKDIR(r0, 0x0, 0x0) 18:51:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80440, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) 18:51:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 18:51:31 executing program 3: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="4bf0bb15f04073aa725359155a154c6e01d6b6b8ec035a1090a07fcfe5b4aa0d62d90801d609eb591398cfdcd076f77e402909faa88c16579285fa855d22406de4cd24bfb6c1436e439fc4") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 18:51:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RATTACH(r0, 0x0, 0x0) 18:51:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000009580)=[{{&(0x7f0000008e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000008f80)=[{&(0x7f0000008e80)=""/173, 0xad}, {&(0x7f0000008f40)=""/20, 0x1b}], 0x100000000000007b}}, {{&(0x7f0000008fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000009400)=[{&(0x7f0000009040)}, {&(0x7f0000009080)=""/170, 0xaa}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000040)=""/36, 0xfd40}, {&(0x7f00000091c0)=""/219, 0xdb}, {&(0x7f00000092c0)=""/76, 0x4c}, {&(0x7f0000009340)=""/139, 0x8b}], 0x7, &(0x7f0000009480)=""/243, 0xf3}}], 0x0, 0x0, &(0x7f0000009600)={0x0, 0x989680}) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 18:51:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x8000000007) r2 = gettid() sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x27d, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4affff10", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00'], 0x60}}, 0x0) tkill(r2, 0x1000000000016) 18:51:31 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x29, 0x46, 0x0, 0x23) 18:51:31 executing program 2: r0 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x5c) 18:51:32 executing program 1: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = gettid() tkill(r3, 0x1000000000016) 18:51:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r1) syz_open_pts(r0, 0x0) ioctl$VT_RELDISP(r1, 0x540b) 18:51:32 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$P9_RXATTRWALK(r0, 0x0, 0x0) 18:51:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VT_ACTIVATE(r2, 0x4b63, 0x3) 18:51:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x8000000000001011}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 18:51:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = eventfd(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x1}) ioctl$EVIOCGUNIQ(r4, 0x80404508, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:51:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) 18:51:32 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x802c542a, &(0x7f00000001c0)=0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000280)) 18:51:32 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x5452, &(0x7f0000000080)) 18:51:32 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) getrandom(&(0x7f0000000080)=""/4121, 0x1019, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 18:51:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x0) 18:51:33 executing program 5: prctl$PR_SET_MM_AUXV(0x21, 0xc, 0x0, 0x0) 18:51:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000003700)='/dev/net/tun\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000080)) 18:51:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2001c080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x20000000000001, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 18:51:34 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x2, &(0x7f0000000100)={'netdevsim0\x00', @link_local}) 18:51:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) 18:51:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 18:51:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x5451, 0x0) 18:51:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18:51:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 18:51:34 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:51:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) sendto$unix(r1, 0x0, 0x0, 0x8080020004000, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18:51:35 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, r0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x14, 0x0, &(0x7f0000000100)) 18:51:35 executing program 0: vmsplice(0xffffffffffffff9c, 0x0, 0x0, 0x8) 18:51:36 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) 18:51:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) dup3(r2, r3, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000040)) 18:51:36 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0x396, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 18:51:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup2(r0, r0) ioctl$TIOCGRS485(r1, 0x542e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18:51:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20044040) 18:51:36 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:51:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000080)=0x3e80, 0x4) 18:51:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b66, &(0x7f0000000080)) 18:51:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 18:51:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24010841, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r1) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) tkill(r2, 0x1000000000016) 18:51:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 18:51:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) dup3(r0, r1, 0x0) ioctl$PIO_FONTX(r1, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0}) 18:51:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:51:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000000) 18:51:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 18:51:38 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:51:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') ioctl$NS_GET_USERNS(r0, 0x5450, 0x0) 18:51:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 18:51:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x3d6, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 18:51:39 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 18:51:43 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 18:51:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="98d8", 0x2}], 0x1}}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) tkill(r1, 0x1000000000016) 18:51:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) getrandom(&(0x7f0000001ac0)=""/4096, 0x1000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, 0x0) 18:51:43 executing program 4: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:51:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x125d, 0x0) 18:51:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1111.319216][T22322] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1111.327698][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.337792][T22322] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1111.346199][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:51:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 1111.382691][T22324] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1111.391449][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:51:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000040)=0x20) [ 1111.580957][T22322] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1111.589700][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.600196][T22322] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1111.608615][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.621103][T22324] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1111.630045][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:51:43 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) dup3(r0, r1, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 18:51:43 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:51:43 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}}) 18:51:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) tkill(r2, 0x1000000000016) 18:51:44 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:51:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000001880)=""/253, &(0x7f0000001980)=0xfd) 18:51:44 executing program 2: prctl$PR_SET_ENDIAN(0x1e, 0x0) 18:51:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:51:44 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:51:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200) 18:51:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getrandom(&(0x7f00000010c0)=""/4093, 0xffd, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) 18:51:44 executing program 4: setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0xfffffffffffffe43) 18:51:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x1f0) dup3(r0, r1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 18:51:44 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 18:51:44 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002200)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) dup2(r2, r1) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 18:51:45 executing program 0: r0 = socket(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:51:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 18:51:45 executing program 2: splice(0xffffffffffffff9c, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x5) 18:51:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 18:51:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:51:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x14, &(0x7f0000000100)={0x0, 0x1, [], [@calipso={0x7, 0x8}]}, 0x18) 18:51:46 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x60) ioctl$int_out(r2, 0x2, &(0x7f0000000000)) 18:51:46 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000000c0)) 18:51:46 executing program 5: sched_setscheduler(0x0, 0x5, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r0, 0x4b36, 0x0) 18:51:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 18:51:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000140)) 18:51:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) write$P9_ROPEN(r2, 0x0, 0x0) 18:51:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x5452, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) 18:51:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x6c00) dup3(r1, r0, 0x0) 18:51:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$KDADDIO(r3, 0x4b34, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:51:46 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 18:51:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:51:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$EVIOCSABS3F(r2, 0x401845ff, 0x0) 18:51:47 executing program 4: r0 = inotify_init1(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 18:51:47 executing program 3: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 18:51:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) close(r1) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000240)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) tkill(r2, 0x1000000000016) 18:51:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}}, 0x0) 18:51:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x0) r1 = dup(r0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000280)) 18:51:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x800000000000014) r2 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r2, 0x0, 0x0) 18:51:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5450, 0x0) 18:51:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) 18:51:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x404100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 1116.791777][T22464] not chained 550000 origins [ 1116.796521][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1116.805205][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.815312][T22464] Call Trace: [ 1116.818617][T22464] dump_stack+0x21c/0x280 [ 1116.822958][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1116.828702][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1116.833898][T22464] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1116.839708][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1116.844907][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1116.850450][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1116.856516][T22464] ? _copy_from_user+0x201/0x310 [ 1116.861456][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1116.866651][T22464] __msan_chain_origin+0x50/0x90 [ 1116.871591][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1116.876714][T22464] get_compat_msghdr+0x108/0x2b0 [ 1116.881661][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1116.886175][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1116.891412][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1116.897303][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1116.902501][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1116.907805][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1116.912588][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1116.917356][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1116.922054][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1116.928131][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1116.934281][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1116.939484][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1116.944339][T22464] do_SYSENTER_32+0x73/0x90 [ 1116.948858][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1116.955177][T22464] RIP: 0023:0xf7fe8549 [ 1116.959231][T22464] Code: Bad RIP value. [ 1116.963289][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1116.971708][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1116.979692][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1116.987667][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1116.995631][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1117.003596][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1117.011567][T22464] Uninit was stored to memory at: [ 1117.016724][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1117.022447][T22464] __msan_chain_origin+0x50/0x90 [ 1117.027381][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1117.032490][T22464] get_compat_msghdr+0x108/0x2b0 [ 1117.037421][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1117.041917][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1117.046588][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1117.052652][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1117.058799][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1117.064004][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1117.068858][T22464] do_SYSENTER_32+0x73/0x90 [ 1117.073356][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.079663][T22464] [ 1117.081976][T22464] Uninit was stored to memory at: [ 1117.087005][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1117.092716][T22464] __msan_chain_origin+0x50/0x90 [ 1117.097649][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1117.102752][T22464] get_compat_msghdr+0x108/0x2b0 [ 1117.107683][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1117.112177][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1117.116855][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1117.122914][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1117.129071][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1117.134261][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1117.139101][T22464] do_SYSENTER_32+0x73/0x90 [ 1117.143609][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.149915][T22464] [ 1117.152229][T22464] Uninit was stored to memory at: [ 1117.157250][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1117.162963][T22464] __msan_chain_origin+0x50/0x90 [ 1117.167900][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1117.173008][T22464] get_compat_msghdr+0x108/0x2b0 [ 1117.177955][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1117.182474][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1117.187155][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1117.193233][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1117.199387][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1117.204581][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1117.209424][T22464] do_SYSENTER_32+0x73/0x90 [ 1117.213928][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.220235][T22464] [ 1117.222551][T22464] Uninit was stored to memory at: [ 1117.227571][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1117.233286][T22464] __msan_chain_origin+0x50/0x90 [ 1117.238225][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1117.243332][T22464] get_compat_msghdr+0x108/0x2b0 [ 1117.248263][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1117.252764][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1117.257440][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1117.263505][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1117.269653][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1117.274846][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1117.279690][T22464] do_SYSENTER_32+0x73/0x90 [ 1117.284192][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.290500][T22464] [ 1117.292815][T22464] Uninit was stored to memory at: [ 1117.297841][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1117.303556][T22464] __msan_chain_origin+0x50/0x90 [ 1117.308494][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1117.313600][T22464] get_compat_msghdr+0x108/0x2b0 [ 1117.318532][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1117.323026][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1117.327701][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1117.333763][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1117.339912][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1117.345105][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1117.349958][T22464] do_SYSENTER_32+0x73/0x90 [ 1117.354456][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.360770][T22464] [ 1117.363086][T22464] Uninit was stored to memory at: [ 1117.368108][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1117.373822][T22464] __msan_chain_origin+0x50/0x90 [ 1117.378756][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1117.383861][T22464] get_compat_msghdr+0x108/0x2b0 [ 1117.388792][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1117.393286][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1117.397961][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1117.404032][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1117.410183][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1117.415377][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1117.420226][T22464] do_SYSENTER_32+0x73/0x90 [ 1117.424728][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.431038][T22464] [ 1117.433364][T22464] Uninit was stored to memory at: [ 1117.438382][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1117.444096][T22464] __msan_chain_origin+0x50/0x90 [ 1117.449032][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1117.454145][T22464] get_compat_msghdr+0x108/0x2b0 [ 1117.459103][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1117.463610][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1117.468372][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1117.474436][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1117.480589][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1117.485889][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1117.490747][T22464] do_SYSENTER_32+0x73/0x90 [ 1117.495250][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1117.501560][T22464] [ 1117.503881][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1117.510561][T22464] do_recvmmsg+0xbf/0x22c0 [ 1117.514969][T22464] do_recvmmsg+0xbf/0x22c0 18:51:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_aout(r0, 0x0, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 18:51:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 18:51:50 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) dup2(r3, r2) linkat(r1, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r2, &(0x7f0000000040)='./file0\x00', 0x0) 18:51:50 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) 18:51:50 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r1) tkill(r0, 0x1000000000015) 18:51:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x14, 0x0, 0x0) 18:51:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_BSZGET(r1, 0x80081270, 0x0) 18:51:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 1119.073111][T22464] not chained 560000 origins [ 1119.077767][T22464] CPU: 0 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1119.086433][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.096481][T22464] Call Trace: [ 1119.099772][T22464] dump_stack+0x21c/0x280 [ 1119.104102][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1119.109819][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1119.115018][T22464] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1119.120826][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1119.126021][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1119.131561][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1119.137686][T22464] ? _copy_from_user+0x201/0x310 [ 1119.142623][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1119.147818][T22464] __msan_chain_origin+0x50/0x90 [ 1119.152753][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.157899][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.162840][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.167452][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1119.172772][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1119.178669][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1119.183867][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1119.189149][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1119.193905][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1119.198665][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.203359][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.209428][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.215586][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.220790][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.225635][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.230133][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.236464][T22464] RIP: 0023:0xf7fe8549 [ 1119.240517][T22464] Code: Bad RIP value. [ 1119.244569][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1119.252985][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1119.260948][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.268912][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1119.276878][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1119.284845][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.292823][T22464] Uninit was stored to memory at: [ 1119.297850][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1119.303560][T22464] __msan_chain_origin+0x50/0x90 [ 1119.308488][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.313613][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.318539][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.323034][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.327704][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.333762][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.339905][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.345095][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.349935][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.354428][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.360746][T22464] [ 1119.363061][T22464] Uninit was stored to memory at: [ 1119.368076][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1119.373786][T22464] __msan_chain_origin+0x50/0x90 [ 1119.378717][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.383833][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.388761][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.393253][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.397928][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.403993][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.410180][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.415370][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.420215][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.424709][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.431029][T22464] [ 1119.433343][T22464] Uninit was stored to memory at: [ 1119.438364][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1119.444086][T22464] __msan_chain_origin+0x50/0x90 [ 1119.449017][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.454118][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.459045][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.463538][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.468205][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.474291][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.480455][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.485643][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.490512][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.495009][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.501316][T22464] [ 1119.503633][T22464] Uninit was stored to memory at: [ 1119.508649][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1119.514356][T22464] __msan_chain_origin+0x50/0x90 [ 1119.519284][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.524387][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.529315][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.533806][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.538476][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.544543][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.550689][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.555876][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.560727][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.565221][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.571527][T22464] [ 1119.573838][T22464] Uninit was stored to memory at: [ 1119.578853][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1119.584564][T22464] __msan_chain_origin+0x50/0x90 [ 1119.589488][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.594592][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.599519][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.604024][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.608691][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.614768][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.620913][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.626102][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.630944][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.635447][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.641755][T22464] [ 1119.644070][T22464] Uninit was stored to memory at: [ 1119.649086][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1119.654813][T22464] __msan_chain_origin+0x50/0x90 [ 1119.659759][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.664859][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.669787][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.674279][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.678955][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.685015][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.691158][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.696347][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.701195][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.705693][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.711996][T22464] [ 1119.714309][T22464] Uninit was stored to memory at: [ 1119.719326][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1119.725034][T22464] __msan_chain_origin+0x50/0x90 [ 1119.729964][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1119.735096][T22464] get_compat_msghdr+0x108/0x2b0 [ 1119.740023][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1119.744514][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1119.749181][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1119.755238][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1119.761382][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1119.766572][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1119.771410][T22464] do_SYSENTER_32+0x73/0x90 [ 1119.775905][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.782226][T22464] [ 1119.784548][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1119.791210][T22464] do_recvmmsg+0xbf/0x22c0 [ 1119.795617][T22464] do_recvmmsg+0xbf/0x22c0 [ 1120.274961][T22464] not chained 570000 origins [ 1120.279605][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1120.288279][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.298338][T22464] Call Trace: [ 1120.301646][T22464] dump_stack+0x21c/0x280 [ 1120.306006][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1120.311775][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1120.316987][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1120.322543][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1120.328628][T22464] ? _copy_from_user+0x201/0x310 [ 1120.333576][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1120.338783][T22464] __msan_chain_origin+0x50/0x90 [ 1120.343737][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.348870][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.353829][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.358359][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1120.363568][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1120.369458][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1120.374658][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1120.379942][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1120.384706][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1120.389469][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.394157][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.400227][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.406378][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.411585][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.416441][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.420944][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.427264][T22464] RIP: 0023:0xf7fe8549 [ 1120.431329][T22464] Code: Bad RIP value. [ 1120.435386][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1120.443791][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1120.451760][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1120.459726][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1120.467690][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1120.475661][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1120.483638][T22464] Uninit was stored to memory at: [ 1120.488665][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1120.494386][T22464] __msan_chain_origin+0x50/0x90 [ 1120.499318][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.504425][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.509357][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.513855][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.518532][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.524595][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.530748][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.535946][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.540798][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.545299][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.551614][T22464] [ 1120.553935][T22464] Uninit was stored to memory at: [ 1120.558961][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1120.564679][T22464] __msan_chain_origin+0x50/0x90 [ 1120.569620][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.574865][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.579817][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.584323][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.588999][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.595063][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.601218][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.606419][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.611268][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.615774][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.622088][T22464] [ 1120.624411][T22464] Uninit was stored to memory at: [ 1120.629437][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1120.635157][T22464] __msan_chain_origin+0x50/0x90 [ 1120.640106][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.645219][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.650160][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.654665][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.659367][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.665437][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.671594][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.676795][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.681649][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.686156][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.692467][T22464] [ 1120.694790][T22464] Uninit was stored to memory at: [ 1120.699815][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1120.705536][T22464] __msan_chain_origin+0x50/0x90 [ 1120.710473][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.715583][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.720519][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.725023][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.729703][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.735772][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.741925][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.747124][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.751974][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.756481][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.762794][T22464] [ 1120.765118][T22464] Uninit was stored to memory at: [ 1120.770144][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1120.775865][T22464] __msan_chain_origin+0x50/0x90 [ 1120.780816][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.785929][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.790863][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.795362][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.800036][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.806101][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.812259][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.817458][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.822310][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.826821][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.833135][T22464] [ 1120.835462][T22464] Uninit was stored to memory at: [ 1120.840488][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1120.846211][T22464] __msan_chain_origin+0x50/0x90 [ 1120.851156][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.856271][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.861211][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.865720][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.870487][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.876557][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.882714][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.887917][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.892772][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.897276][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.903729][T22464] [ 1120.906053][T22464] Uninit was stored to memory at: [ 1120.911086][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1120.916805][T22464] __msan_chain_origin+0x50/0x90 [ 1120.921873][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1120.926985][T22464] get_compat_msghdr+0x108/0x2b0 [ 1120.932044][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1120.936550][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1120.941236][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1120.947322][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1120.953480][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1120.958687][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1120.963543][T22464] do_SYSENTER_32+0x73/0x90 [ 1120.968050][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.974368][T22464] [ 1120.976698][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1120.983374][T22464] do_recvmmsg+0xbf/0x22c0 [ 1120.987949][T22464] do_recvmmsg+0xbf/0x22c0 [ 1121.793075][T22464] not chained 580000 origins [ 1121.798145][T22464] CPU: 0 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1121.806834][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.817168][T22464] Call Trace: [ 1121.820486][T22464] dump_stack+0x21c/0x280 [ 1121.824850][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1121.830625][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1121.835854][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1121.841465][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1121.847568][T22464] ? _copy_from_user+0x201/0x310 [ 1121.852527][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1121.857923][T22464] __msan_chain_origin+0x50/0x90 [ 1121.862877][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1121.868019][T22464] get_compat_msghdr+0x108/0x2b0 [ 1121.872969][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1121.877583][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1121.882790][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1121.888778][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1121.894129][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1121.899419][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1121.904187][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1121.908954][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1121.913734][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1121.919959][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1121.926243][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1121.931453][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1121.936550][T22464] do_SYSENTER_32+0x73/0x90 [ 1121.941364][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1121.947855][T22464] RIP: 0023:0xf7fe8549 [ 1121.952008][T22464] Code: Bad RIP value. [ 1121.956071][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1121.964486][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1121.972472][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1121.980621][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1121.989123][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1121.997096][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1122.005079][T22464] Uninit was stored to memory at: [ 1122.010114][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1122.016021][T22464] __msan_chain_origin+0x50/0x90 [ 1122.020975][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.026099][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.031039][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.035543][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.040224][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.046298][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.052459][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.057961][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.062823][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.067331][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.073738][T22464] [ 1122.076264][T22464] Uninit was stored to memory at: [ 1122.081298][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1122.087042][T22464] __msan_chain_origin+0x50/0x90 [ 1122.091998][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.097113][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.102056][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.106571][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.111254][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.117326][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.123485][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.128688][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.133668][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.138386][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.144704][T22464] [ 1122.147034][T22464] Uninit was stored to memory at: [ 1122.152075][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1122.157876][T22464] __msan_chain_origin+0x50/0x90 [ 1122.162819][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.167935][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.173001][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.177767][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.182465][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.188669][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.194833][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.200034][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.204887][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.209394][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.215840][T22464] [ 1122.218174][T22464] Uninit was stored to memory at: [ 1122.223209][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1122.228932][T22464] __msan_chain_origin+0x50/0x90 [ 1122.233872][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.238986][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.243929][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.248433][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.253247][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.259314][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.265481][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.270690][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.275681][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.280187][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.286617][T22464] [ 1122.288943][T22464] Uninit was stored to memory at: [ 1122.293977][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1122.299707][T22464] __msan_chain_origin+0x50/0x90 [ 1122.304650][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.309765][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.314706][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.319342][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.324047][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.330243][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.336399][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.341604][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.346455][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.351339][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.357657][T22464] [ 1122.359979][T22464] Uninit was stored to memory at: [ 1122.365010][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1122.370994][T22464] __msan_chain_origin+0x50/0x90 [ 1122.375934][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.381142][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.386085][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.390591][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.395270][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.401535][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.407694][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.412892][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.417745][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.422374][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.428802][T22464] [ 1122.431130][T22464] Uninit was stored to memory at: [ 1122.436162][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1122.441884][T22464] __msan_chain_origin+0x50/0x90 [ 1122.446989][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.452104][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.457138][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.461646][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.466329][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.472398][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.478564][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.483768][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.488626][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.493137][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.499452][T22464] [ 1122.501780][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1122.508454][T22464] do_recvmmsg+0xbf/0x22c0 [ 1122.512871][T22464] do_recvmmsg+0xbf/0x22c0 [ 1122.807230][T22464] not chained 590000 origins [ 1122.811881][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1122.820882][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.831207][T22464] Call Trace: [ 1122.834530][T22464] dump_stack+0x21c/0x280 [ 1122.838890][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1122.844650][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1122.849877][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1122.855103][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1122.860812][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1122.867058][T22464] ? _copy_from_user+0x201/0x310 [ 1122.872153][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1122.877376][T22464] __msan_chain_origin+0x50/0x90 [ 1122.882349][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1122.887502][T22464] get_compat_msghdr+0x108/0x2b0 [ 1122.892648][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1122.897187][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1122.902563][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1122.908485][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1122.913711][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1122.919023][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1122.923804][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1122.928592][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1122.933306][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.939416][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.945605][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1122.950985][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1122.955896][T22464] do_SYSENTER_32+0x73/0x90 [ 1122.960425][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.966856][T22464] RIP: 0023:0xf7fe8549 [ 1122.970925][T22464] Code: Bad RIP value. [ 1122.975185][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1122.983829][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1122.991819][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1122.999818][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1123.008038][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1123.016295][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1123.024425][T22464] Uninit was stored to memory at: [ 1123.029498][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.035237][T22464] __msan_chain_origin+0x50/0x90 [ 1123.040194][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.045325][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.050429][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.054951][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.059792][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.066003][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.072193][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.077408][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.082434][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.086959][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.093287][T22464] [ 1123.095629][T22464] Uninit was stored to memory at: [ 1123.100837][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.106577][T22464] __msan_chain_origin+0x50/0x90 [ 1123.111531][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.116662][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.121789][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.126311][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.131046][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.137215][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.143378][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.148594][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.153471][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.157988][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.164655][T22464] [ 1123.166976][T22464] Uninit was stored to memory at: [ 1123.172013][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.177734][T22464] __msan_chain_origin+0x50/0x90 [ 1123.182667][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.187766][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.192693][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.197430][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.202183][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.208238][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.214515][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.219709][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.224552][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.229042][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.235622][T22464] [ 1123.237944][T22464] Uninit was stored to memory at: [ 1123.242961][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.248669][T22464] __msan_chain_origin+0x50/0x90 [ 1123.253759][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.258860][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.263791][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.268367][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.273156][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.279323][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.285654][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.291282][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.296125][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.300618][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.306935][T22464] [ 1123.309253][T22464] Uninit was stored to memory at: [ 1123.314269][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.319986][T22464] __msan_chain_origin+0x50/0x90 [ 1123.324917][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.330017][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.334941][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.339678][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.344347][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.350512][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.356661][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.361853][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.366787][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.371440][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.377747][T22464] [ 1123.380065][T22464] Uninit was stored to memory at: [ 1123.385202][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.391046][T22464] __msan_chain_origin+0x50/0x90 [ 1123.396442][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.401659][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.406870][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.411360][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.416029][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.422225][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.428603][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.434093][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.439015][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.443511][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.449817][T22464] [ 1123.452374][T22464] Uninit was stored to memory at: [ 1123.457389][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.463193][T22464] __msan_chain_origin+0x50/0x90 [ 1123.468230][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.473578][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.478515][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.483013][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.487769][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.493827][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.500178][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.505372][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.510500][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.515091][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.521421][T22464] [ 1123.523740][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1123.530399][T22464] do_recvmmsg+0xbf/0x22c0 [ 1123.534962][T22464] do_recvmmsg+0xbf/0x22c0 [ 1123.758386][T22464] not chained 600000 origins [ 1123.763276][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1123.772062][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.782251][T22464] Call Trace: [ 1123.785537][T22464] dump_stack+0x21c/0x280 [ 1123.790005][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1123.795730][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1123.800917][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1123.806600][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1123.812666][T22464] ? _copy_from_user+0x201/0x310 [ 1123.817682][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1123.823022][T22464] __msan_chain_origin+0x50/0x90 [ 1123.827952][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.833063][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.838202][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.842742][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1123.848056][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1123.854038][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1123.859342][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1123.864625][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1123.869509][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1123.874268][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1123.878943][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.885006][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.891236][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1123.896567][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1123.901418][T22464] do_SYSENTER_32+0x73/0x90 [ 1123.905921][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.912237][T22464] RIP: 0023:0xf7fe8549 [ 1123.916289][T22464] Code: Bad RIP value. [ 1123.920467][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1123.928871][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1123.936984][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1123.945171][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1123.953249][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1123.961211][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1123.969289][T22464] Uninit was stored to memory at: [ 1123.974325][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1123.980192][T22464] __msan_chain_origin+0x50/0x90 [ 1123.985146][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1123.990253][T22464] get_compat_msghdr+0x108/0x2b0 [ 1123.995180][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1123.999715][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.004400][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.010686][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.016837][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.022032][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.027120][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.031695][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.038149][T22464] [ 1124.040471][T22464] Uninit was stored to memory at: [ 1124.045491][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.051197][T22464] __msan_chain_origin+0x50/0x90 [ 1124.056279][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.061545][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.066486][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.070979][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.075820][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.081890][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.088228][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.093532][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.098370][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.103012][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.109465][T22464] [ 1124.111903][T22464] Uninit was stored to memory at: [ 1124.117156][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.122869][T22464] __msan_chain_origin+0x50/0x90 [ 1124.127805][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.133056][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.137979][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.142481][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.147279][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.153337][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.159625][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.165051][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.169889][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.174628][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.180942][T22464] [ 1124.183260][T22464] Uninit was stored to memory at: [ 1124.188426][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.194140][T22464] __msan_chain_origin+0x50/0x90 [ 1124.199283][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.204391][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.209449][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.214077][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.218743][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.224805][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.231063][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.236256][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.241094][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.245595][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.251904][T22464] [ 1124.254215][T22464] Uninit was stored to memory at: [ 1124.259231][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.264943][T22464] __msan_chain_origin+0x50/0x90 [ 1124.269865][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.275117][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.280259][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.284755][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.289425][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.295625][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.301902][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.307302][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.312147][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.316647][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.322957][T22464] [ 1124.325269][T22464] Uninit was stored to memory at: [ 1124.330284][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.335996][T22464] __msan_chain_origin+0x50/0x90 [ 1124.340925][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.346028][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.351154][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.355655][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.360327][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.366396][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.372542][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.377729][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.382573][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.387137][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.393447][T22464] [ 1124.395764][T22464] Uninit was stored to memory at: [ 1124.400787][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.406498][T22464] __msan_chain_origin+0x50/0x90 [ 1124.411762][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.416872][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.421809][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.426309][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.430976][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.437030][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.443175][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.448368][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.453214][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.457706][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.464018][T22464] [ 1124.466456][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1124.473428][T22464] do_recvmmsg+0xbf/0x22c0 [ 1124.477835][T22464] do_recvmmsg+0xbf/0x22c0 [ 1124.615736][T22464] not chained 610000 origins [ 1124.620383][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1124.629174][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.639242][T22464] Call Trace: [ 1124.642559][T22464] dump_stack+0x21c/0x280 [ 1124.646915][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1124.652673][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1124.658067][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1124.663644][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1124.669733][T22464] ? _copy_from_user+0x201/0x310 [ 1124.674693][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1124.680074][T22464] __msan_chain_origin+0x50/0x90 [ 1124.685116][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.690264][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.695232][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.699774][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1124.705175][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1124.711092][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1124.716313][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1124.721632][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1124.726415][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1124.731204][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.735917][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.742018][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.748196][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.753422][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.758385][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.762909][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.769249][T22464] RIP: 0023:0xf7fe8549 [ 1124.773319][T22464] Code: Bad RIP value. [ 1124.777400][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1124.786016][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1124.794010][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1124.801999][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1124.809984][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1124.817968][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1124.826063][T22464] Uninit was stored to memory at: [ 1124.831111][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.836857][T22464] __msan_chain_origin+0x50/0x90 [ 1124.841868][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.846987][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.852046][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.856664][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.861338][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.867557][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.873718][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.879045][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.883889][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.888388][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.894965][T22464] [ 1124.897297][T22464] Uninit was stored to memory at: [ 1124.902430][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.908267][T22464] __msan_chain_origin+0x50/0x90 [ 1124.913219][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.918322][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.923360][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.927851][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1124.932640][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.938835][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.944993][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1124.950181][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1124.955022][T22464] do_SYSENTER_32+0x73/0x90 [ 1124.959514][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.966071][T22464] [ 1124.968387][T22464] Uninit was stored to memory at: [ 1124.973401][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1124.979110][T22464] __msan_chain_origin+0x50/0x90 [ 1124.984040][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1124.989156][T22464] get_compat_msghdr+0x108/0x2b0 [ 1124.994093][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1124.998880][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.003557][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.009618][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.015762][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.020947][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.025790][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.030280][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.036589][T22464] [ 1125.038900][T22464] Uninit was stored to memory at: [ 1125.043914][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.049619][T22464] __msan_chain_origin+0x50/0x90 [ 1125.054552][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.059646][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.064573][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.069061][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.073725][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.079781][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.086070][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.091254][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.096095][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.100584][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.106890][T22464] [ 1125.109203][T22464] Uninit was stored to memory at: [ 1125.114219][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.119923][T22464] __msan_chain_origin+0x50/0x90 [ 1125.124852][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.129948][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.134871][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.139359][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.144037][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.150088][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.156240][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.161440][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.166285][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.170776][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.177228][T22464] [ 1125.179549][T22464] Uninit was stored to memory at: [ 1125.184582][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.190291][T22464] __msan_chain_origin+0x50/0x90 [ 1125.195218][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.200321][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.205249][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.209736][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.214686][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.220742][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.226886][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.232077][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.237060][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.241548][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.247855][T22464] [ 1125.250178][T22464] Uninit was stored to memory at: [ 1125.255193][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.260899][T22464] __msan_chain_origin+0x50/0x90 [ 1125.265826][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.270922][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.275847][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.280346][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.285123][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.291179][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.297326][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.302519][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.307356][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.311846][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.318150][T22464] [ 1125.320464][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1125.327125][T22464] do_recvmmsg+0xbf/0x22c0 [ 1125.331524][T22464] do_recvmmsg+0xbf/0x22c0 [ 1125.513581][T22464] not chained 620000 origins [ 1125.518414][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1125.527094][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.537414][T22464] Call Trace: [ 1125.540737][T22464] dump_stack+0x21c/0x280 [ 1125.545103][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1125.551022][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1125.556358][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1125.561934][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1125.568035][T22464] ? _copy_from_user+0x201/0x310 [ 1125.572993][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1125.578208][T22464] __msan_chain_origin+0x50/0x90 [ 1125.583170][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.588319][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.593304][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.597929][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1125.603154][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1125.609068][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1125.614300][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1125.619603][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1125.624500][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1125.629298][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.634013][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.640137][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.646333][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.651731][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.656603][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.661112][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.667429][T22464] RIP: 0023:0xf7fe8549 [ 1125.671655][T22464] Code: Bad RIP value. [ 1125.675726][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1125.684286][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1125.692259][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1125.700224][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1125.708309][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1125.716273][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1125.724244][T22464] Uninit was stored to memory at: [ 1125.729263][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.734972][T22464] __msan_chain_origin+0x50/0x90 [ 1125.739897][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.744996][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.749969][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.754468][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.759131][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.765189][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.771327][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.776513][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.781351][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.785842][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.792149][T22464] [ 1125.794463][T22464] Uninit was stored to memory at: [ 1125.799478][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.805186][T22464] __msan_chain_origin+0x50/0x90 [ 1125.810120][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.815221][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.820152][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.824652][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.829334][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.835391][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.841702][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.846888][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.851726][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.856225][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.862530][T22464] [ 1125.864933][T22464] Uninit was stored to memory at: [ 1125.869948][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.875655][T22464] __msan_chain_origin+0x50/0x90 [ 1125.880582][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.885818][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.890741][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.895286][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.899955][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.906355][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.912522][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.917811][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.922918][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.927411][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.933812][T22464] [ 1125.936345][T22464] Uninit was stored to memory at: [ 1125.941455][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1125.947262][T22464] __msan_chain_origin+0x50/0x90 [ 1125.952353][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1125.957450][T22464] get_compat_msghdr+0x108/0x2b0 [ 1125.962486][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1125.966982][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1125.971787][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.977967][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.984115][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1125.989409][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1125.994270][T22464] do_SYSENTER_32+0x73/0x90 [ 1125.998770][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.005402][T22464] [ 1126.007730][T22464] Uninit was stored to memory at: [ 1126.012758][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.018473][T22464] __msan_chain_origin+0x50/0x90 [ 1126.023580][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.028677][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.033871][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.038380][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.043049][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.049193][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.055341][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.060708][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.065550][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.070211][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.076522][T22464] [ 1126.078926][T22464] Uninit was stored to memory at: [ 1126.084117][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.089828][T22464] __msan_chain_origin+0x50/0x90 [ 1126.094972][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.100074][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.105007][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.109495][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.114161][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.120232][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.126379][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.131592][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.136580][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.141078][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.147528][T22464] [ 1126.149844][T22464] Uninit was stored to memory at: [ 1126.154950][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.160681][T22464] __msan_chain_origin+0x50/0x90 [ 1126.165704][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.171028][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.175964][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.180554][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.185226][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.191625][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.197885][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.203166][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.208005][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.212660][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.218983][T22464] [ 1126.221427][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1126.228446][T22464] do_recvmmsg+0xbf/0x22c0 [ 1126.232942][T22464] do_recvmmsg+0xbf/0x22c0 [ 1126.369478][T22464] not chained 630000 origins [ 1126.374221][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1126.383095][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1126.393322][T22464] Call Trace: [ 1126.396650][T22464] dump_stack+0x21c/0x280 [ 1126.401013][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1126.406779][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1126.412173][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1126.417826][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1126.423924][T22464] ? _copy_from_user+0x201/0x310 [ 1126.428903][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1126.434130][T22464] __msan_chain_origin+0x50/0x90 [ 1126.439093][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.444245][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.449223][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.453760][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1126.458979][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1126.465065][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1126.470294][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1126.475606][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1126.480476][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1126.485268][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.489982][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.496082][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.502264][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.507576][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.512445][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.516983][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.523324][T22464] RIP: 0023:0xf7fe8549 [ 1126.527394][T22464] Code: Bad RIP value. [ 1126.531613][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1126.540038][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1126.548133][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1126.556216][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1126.564180][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1126.572244][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1126.580347][T22464] Uninit was stored to memory at: [ 1126.585370][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.591078][T22464] __msan_chain_origin+0x50/0x90 [ 1126.596184][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.601287][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.606389][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.610882][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.615552][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.621857][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.628014][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.633222][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.638068][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.642574][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.648890][T22464] [ 1126.651205][T22464] Uninit was stored to memory at: [ 1126.656228][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.661937][T22464] __msan_chain_origin+0x50/0x90 [ 1126.666865][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.671965][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.676976][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.681483][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.686163][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.692471][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.698760][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.703957][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.708797][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.713413][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.719719][T22464] [ 1126.722033][T22464] Uninit was stored to memory at: [ 1126.727050][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.732847][T22464] __msan_chain_origin+0x50/0x90 [ 1126.737774][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.743037][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.747966][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.752580][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.757250][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.763312][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.769612][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.774805][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.779789][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.784284][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.790612][T22464] [ 1126.792932][T22464] Uninit was stored to memory at: [ 1126.798105][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.803826][T22464] __msan_chain_origin+0x50/0x90 [ 1126.808756][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.813858][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.818903][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.823508][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.828178][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.834255][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.840518][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.845710][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.850661][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.855382][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.861695][T22464] [ 1126.864016][T22464] Uninit was stored to memory at: [ 1126.869121][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.874833][T22464] __msan_chain_origin+0x50/0x90 [ 1126.879882][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.884990][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.889915][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.894537][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.899215][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.905281][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.911515][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.916708][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.921551][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.926192][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.932503][T22464] [ 1126.934929][T22464] Uninit was stored to memory at: [ 1126.939960][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1126.945803][T22464] __msan_chain_origin+0x50/0x90 [ 1126.950730][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1126.955969][T22464] get_compat_msghdr+0x108/0x2b0 [ 1126.960986][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1126.965484][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1126.970277][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.976339][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.982487][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1126.987936][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1126.992791][T22464] do_SYSENTER_32+0x73/0x90 [ 1126.997301][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.003698][T22464] [ 1127.006015][T22464] Uninit was stored to memory at: [ 1127.011032][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.016906][T22464] __msan_chain_origin+0x50/0x90 [ 1127.022040][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.027144][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.032276][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.036768][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.041449][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.047522][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.053686][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.058962][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.063894][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.068388][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.074904][T22464] [ 1127.077224][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1127.083886][T22464] do_recvmmsg+0xbf/0x22c0 [ 1127.088289][T22464] do_recvmmsg+0xbf/0x22c0 [ 1127.242237][T22464] not chained 640000 origins [ 1127.246889][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1127.255653][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1127.265718][T22464] Call Trace: [ 1127.269032][T22464] dump_stack+0x21c/0x280 [ 1127.273655][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1127.279402][T22464] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1127.285533][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1127.290754][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1127.296326][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1127.302458][T22464] ? _copy_from_user+0x201/0x310 [ 1127.307420][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1127.312658][T22464] __msan_chain_origin+0x50/0x90 [ 1127.317622][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.322766][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.327732][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.332551][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1127.338113][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1127.344172][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1127.349398][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1127.354718][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1127.359500][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1127.364424][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.369137][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.375329][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.381508][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.386734][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.391620][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.396162][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.402506][T22464] RIP: 0023:0xf7fe8549 [ 1127.406580][T22464] Code: Bad RIP value. [ 1127.410815][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1127.419253][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1127.427241][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1127.435224][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1127.443370][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1127.451603][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1127.459604][T22464] Uninit was stored to memory at: [ 1127.464627][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.470331][T22464] __msan_chain_origin+0x50/0x90 [ 1127.475260][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.481055][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.486034][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.490639][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.495313][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.501523][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.507825][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.513017][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.517859][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.522358][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.528698][T22464] [ 1127.531010][T22464] Uninit was stored to memory at: [ 1127.536140][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.541852][T22464] __msan_chain_origin+0x50/0x90 [ 1127.546777][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.551992][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.556928][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.561630][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.566316][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.572452][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.578594][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.583775][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.588615][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.593127][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.599439][T22464] [ 1127.601754][T22464] Uninit was stored to memory at: [ 1127.606778][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.612648][T22464] __msan_chain_origin+0x50/0x90 [ 1127.617687][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.622791][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.627715][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.632205][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.637022][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.643084][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.649226][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.654565][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.659551][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.664043][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.670359][T22464] [ 1127.672681][T22464] Uninit was stored to memory at: [ 1127.677696][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.683580][T22464] __msan_chain_origin+0x50/0x90 [ 1127.688508][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.693609][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.698531][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.703026][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.707694][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.713983][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.720152][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.725472][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.730474][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.735072][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.741384][T22464] [ 1127.743699][T22464] Uninit was stored to memory at: [ 1127.748718][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.754424][T22464] __msan_chain_origin+0x50/0x90 [ 1127.759350][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.764572][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.769496][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.774158][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.778974][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.785152][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.791306][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.796637][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.801502][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.806124][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.812552][T22464] [ 1127.814866][T22464] Uninit was stored to memory at: [ 1127.819879][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.825589][T22464] __msan_chain_origin+0x50/0x90 [ 1127.830518][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.835618][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.840556][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.845070][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.849894][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.855955][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.862361][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.867559][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.872406][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.877129][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.883441][T22464] [ 1127.885956][T22464] Uninit was stored to memory at: [ 1127.890972][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1127.896682][T22464] __msan_chain_origin+0x50/0x90 [ 1127.901639][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1127.906736][T22464] get_compat_msghdr+0x108/0x2b0 [ 1127.911670][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1127.916162][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1127.920829][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.927029][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.933176][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1127.938361][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1127.943203][T22464] do_SYSENTER_32+0x73/0x90 [ 1127.947696][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.954016][T22464] [ 1127.956333][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1127.962998][T22464] do_recvmmsg+0xbf/0x22c0 [ 1127.967559][T22464] do_recvmmsg+0xbf/0x22c0 [ 1128.106697][T22464] not chained 650000 origins [ 1128.111350][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1128.120030][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.130289][T22464] Call Trace: [ 1128.133617][T22464] dump_stack+0x21c/0x280 [ 1128.138144][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1128.143909][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1128.149368][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1128.154950][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1128.161042][T22464] ? _copy_from_user+0x201/0x310 [ 1128.166000][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1128.171307][T22464] __msan_chain_origin+0x50/0x90 [ 1128.176542][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.181699][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.186670][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.191208][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1128.196433][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1128.202631][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1128.207860][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1128.213168][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1128.217946][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1128.222735][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.227474][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.233765][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.239944][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.245172][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.250047][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.254589][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.260932][T22464] RIP: 0023:0xf7fe8549 [ 1128.265112][T22464] Code: Bad RIP value. [ 1128.269196][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1128.277616][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1128.285699][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1128.293879][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1128.302106][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1128.310179][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1128.318159][T22464] Uninit was stored to memory at: [ 1128.323346][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1128.329313][T22464] __msan_chain_origin+0x50/0x90 [ 1128.334245][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.339344][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.344273][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.348922][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.353590][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.359777][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.366061][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.371262][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.376111][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.380886][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.387291][T22464] [ 1128.389605][T22464] Uninit was stored to memory at: [ 1128.394790][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1128.400835][T22464] __msan_chain_origin+0x50/0x90 [ 1128.405772][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.410870][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.415795][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.420454][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.425121][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.431187][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.437481][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.442677][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.447516][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.452011][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.458564][T22464] [ 1128.460895][T22464] Uninit was stored to memory at: [ 1128.465927][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1128.471762][T22464] __msan_chain_origin+0x50/0x90 [ 1128.476894][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.482132][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.487068][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.491702][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.496370][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.502552][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.509079][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.514380][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.519222][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.523715][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.530021][T22464] [ 1128.532334][T22464] Uninit was stored to memory at: [ 1128.537441][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1128.543563][T22464] __msan_chain_origin+0x50/0x90 [ 1128.548491][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.554215][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.559244][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.563790][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.568456][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.574662][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.580978][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.586458][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.591313][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.596162][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.602468][T22464] [ 1128.604786][T22464] Uninit was stored to memory at: [ 1128.609940][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1128.615851][T22464] __msan_chain_origin+0x50/0x90 [ 1128.620916][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.626023][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.631118][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.635621][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.640288][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.646346][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.652586][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.657774][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.662616][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.667430][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.673739][T22464] [ 1128.676055][T22464] Uninit was stored to memory at: [ 1128.681156][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1128.686882][T22464] __msan_chain_origin+0x50/0x90 [ 1128.691812][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.696999][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.702110][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.706602][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.711402][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.717737][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.723977][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.729170][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.734020][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.738517][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.744824][T22464] [ 1128.747143][T22464] Uninit was stored to memory at: [ 1128.752158][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1128.757866][T22464] __msan_chain_origin+0x50/0x90 [ 1128.762904][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1128.768006][T22464] get_compat_msghdr+0x108/0x2b0 [ 1128.772953][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1128.777572][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1128.782244][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.788298][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.794564][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1128.799753][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1128.804596][T22464] do_SYSENTER_32+0x73/0x90 [ 1128.809231][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.815539][T22464] [ 1128.817860][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1128.824523][T22464] do_recvmmsg+0xbf/0x22c0 [ 1128.828927][T22464] do_recvmmsg+0xbf/0x22c0 [ 1128.966753][T22464] not chained 660000 origins [ 1128.971491][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1128.980178][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.990255][T22464] Call Trace: [ 1128.993572][T22464] dump_stack+0x21c/0x280 [ 1128.997929][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1129.003820][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.009045][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1129.014623][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1129.020962][T22464] ? _copy_from_user+0x201/0x310 [ 1129.025927][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.031312][T22464] __msan_chain_origin+0x50/0x90 [ 1129.036276][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.041424][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.046547][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.051080][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.056312][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1129.062236][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.067557][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1129.072865][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1129.077649][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1129.082437][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.087349][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.093451][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.099634][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.104864][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.109736][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.114264][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.120609][T22464] RIP: 0023:0xf7fe8549 [ 1129.124681][T22464] Code: Bad RIP value. [ 1129.128756][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1129.137363][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1129.145557][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1129.153538][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1129.161503][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1129.169641][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1129.177743][T22464] Uninit was stored to memory at: [ 1129.182782][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1129.188496][T22464] __msan_chain_origin+0x50/0x90 [ 1129.193426][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.198526][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.203456][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.208154][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.212932][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.218991][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.225136][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.230321][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.235379][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.239882][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.246193][T22464] [ 1129.248510][T22464] Uninit was stored to memory at: [ 1129.253525][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1129.259228][T22464] __msan_chain_origin+0x50/0x90 [ 1129.264164][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.269269][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.274192][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.278686][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.283502][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.289560][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.295705][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.301098][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.305951][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.310446][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.316953][T22464] [ 1129.319272][T22464] Uninit was stored to memory at: [ 1129.324380][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1129.330083][T22464] __msan_chain_origin+0x50/0x90 [ 1129.335012][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.340115][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.345048][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.349538][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.354292][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.360347][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.366634][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.371826][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.376674][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.381415][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.387854][T22464] [ 1129.390170][T22464] Uninit was stored to memory at: [ 1129.395188][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1129.400998][T22464] __msan_chain_origin+0x50/0x90 [ 1129.405938][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.411169][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.416091][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.420581][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.425381][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.431436][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.437577][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.442764][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.447639][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.452129][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.458433][T22464] [ 1129.460748][T22464] Uninit was stored to memory at: [ 1129.465874][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1129.471583][T22464] __msan_chain_origin+0x50/0x90 [ 1129.476505][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.481806][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.486729][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.491223][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.495996][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.502224][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.508367][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.513556][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.518589][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.523085][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.529389][T22464] [ 1129.531702][T22464] Uninit was stored to memory at: [ 1129.536717][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1129.542426][T22464] __msan_chain_origin+0x50/0x90 [ 1129.547348][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.552445][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.557371][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.562015][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.566682][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.572912][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.579206][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.584395][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.589244][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.593800][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.600108][T22464] [ 1129.602422][T22464] Uninit was stored to memory at: [ 1129.607438][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1129.613146][T22464] __msan_chain_origin+0x50/0x90 [ 1129.618072][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.623176][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.628284][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.632786][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.637460][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.643709][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.649864][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.655054][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.659894][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.664524][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.670847][T22464] [ 1129.673161][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1129.679823][T22464] do_recvmmsg+0xbf/0x22c0 [ 1129.684388][T22464] do_recvmmsg+0xbf/0x22c0 [ 1129.820708][T22464] not chained 670000 origins [ 1129.825532][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1129.834219][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.844408][T22464] Call Trace: [ 1129.847734][T22464] dump_stack+0x21c/0x280 [ 1129.852091][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1129.857882][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.863102][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1129.868682][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1129.874774][T22464] ? _copy_from_user+0x201/0x310 [ 1129.879732][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.884951][T22464] __msan_chain_origin+0x50/0x90 [ 1129.889913][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1129.895066][T22464] get_compat_msghdr+0x108/0x2b0 [ 1129.900042][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1129.904588][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.909812][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1129.915729][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1129.921123][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1129.926430][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1129.931296][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1129.936082][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1129.940795][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.947321][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.953518][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1129.958916][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1129.963818][T22464] do_SYSENTER_32+0x73/0x90 [ 1129.968347][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.974684][T22464] RIP: 0023:0xf7fe8549 [ 1129.978926][T22464] Code: Bad RIP value. [ 1129.983093][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1129.991979][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1130.000135][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1130.008102][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1130.016065][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1130.024323][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1130.032599][T22464] Uninit was stored to memory at: [ 1130.037623][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.043333][T22464] __msan_chain_origin+0x50/0x90 [ 1130.048266][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.053589][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.058525][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.063171][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.067843][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.073906][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.080227][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.085422][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.090262][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.095071][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.101497][T22464] [ 1130.103814][T22464] Uninit was stored to memory at: [ 1130.109051][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.114945][T22464] __msan_chain_origin+0x50/0x90 [ 1130.119892][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.125006][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.129932][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.134424][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.139090][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.145356][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.151516][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.156732][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.161607][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.166104][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.172564][T22464] [ 1130.174881][T22464] Uninit was stored to memory at: [ 1130.180068][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.185991][T22464] __msan_chain_origin+0x50/0x90 [ 1130.191239][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.196438][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.201500][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.205991][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.210788][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.216853][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.223004][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.228192][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.233267][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.237762][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.244072][T22464] [ 1130.246390][T22464] Uninit was stored to memory at: [ 1130.251604][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.257398][T22464] __msan_chain_origin+0x50/0x90 [ 1130.262415][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.267517][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.272443][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.277029][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.281701][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.287760][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.293907][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.299094][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.304204][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.308698][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.315008][T22464] [ 1130.317335][T22464] Uninit was stored to memory at: [ 1130.322364][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.328074][T22464] __msan_chain_origin+0x50/0x90 [ 1130.333253][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.338356][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.343290][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.347917][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.352604][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.358944][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.365106][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.370304][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.375147][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.379838][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.386162][T22464] [ 1130.388483][T22464] Uninit was stored to memory at: [ 1130.393506][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.399305][T22464] __msan_chain_origin+0x50/0x90 [ 1130.404584][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.409685][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.414623][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.419125][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.423804][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.429859][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.436119][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.441626][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.446468][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.450973][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.457627][T22464] [ 1130.460074][T22464] Uninit was stored to memory at: [ 1130.465096][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.470798][T22464] __msan_chain_origin+0x50/0x90 [ 1130.475730][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.480912][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.485943][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.490441][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.495334][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.501498][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.507798][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.512987][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.517954][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.522452][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.528887][T22464] [ 1130.531217][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1130.538101][T22464] do_recvmmsg+0xbf/0x22c0 [ 1130.542510][T22464] do_recvmmsg+0xbf/0x22c0 [ 1130.724066][T22464] not chained 680000 origins [ 1130.728733][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1130.737459][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.747642][T22464] Call Trace: [ 1130.750960][T22464] dump_stack+0x21c/0x280 [ 1130.755326][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1130.761085][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1130.766465][T22464] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1130.772317][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1130.777547][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1130.783227][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1130.789356][T22464] ? _copy_from_user+0x201/0x310 [ 1130.794331][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1130.799550][T22464] __msan_chain_origin+0x50/0x90 [ 1130.804515][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.809665][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.814633][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.819177][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1130.824511][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1130.830430][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1130.835658][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1130.840970][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1130.845753][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1130.850570][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.855303][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.861392][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.867727][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.872924][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1130.877766][T22464] do_SYSENTER_32+0x73/0x90 [ 1130.882276][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.888596][T22464] RIP: 0023:0xf7fe8549 [ 1130.892651][T22464] Code: Bad RIP value. [ 1130.896709][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1130.905111][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1130.913075][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1130.921039][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1130.929158][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1130.937117][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1130.945084][T22464] Uninit was stored to memory at: [ 1130.950102][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1130.955809][T22464] __msan_chain_origin+0x50/0x90 [ 1130.960732][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1130.965841][T22464] get_compat_msghdr+0x108/0x2b0 [ 1130.970775][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1130.975275][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1130.980134][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.986199][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.992343][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1130.997530][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.002383][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.006879][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.013181][T22464] [ 1131.015484][T22464] Uninit was stored to memory at: [ 1131.020488][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.026181][T22464] __msan_chain_origin+0x50/0x90 [ 1131.031097][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.036184][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.041098][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.045579][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.050235][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.056415][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.062547][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.067724][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.072663][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.077157][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.083452][T22464] [ 1131.085754][T22464] Uninit was stored to memory at: [ 1131.090768][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.096478][T22464] __msan_chain_origin+0x50/0x90 [ 1131.101393][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.106480][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.111404][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.115892][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.120545][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.126589][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.132722][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.137902][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.142729][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.147214][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.153509][T22464] [ 1131.155821][T22464] Uninit was stored to memory at: [ 1131.160853][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.166563][T22464] __msan_chain_origin+0x50/0x90 [ 1131.171481][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.176667][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.181581][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.186061][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.190712][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.196761][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.202889][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.208064][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.212892][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.217372][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.223668][T22464] [ 1131.225971][T22464] Uninit was stored to memory at: [ 1131.230974][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.236677][T22464] __msan_chain_origin+0x50/0x90 [ 1131.241592][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.246681][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.251599][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.256077][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.260820][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.266867][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.272999][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.278176][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.283004][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.287487][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.293787][T22464] [ 1131.296091][T22464] Uninit was stored to memory at: [ 1131.301093][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.306788][T22464] __msan_chain_origin+0x50/0x90 [ 1131.311702][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.316792][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.321706][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.326300][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.330956][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.337084][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.343214][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.348392][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.353227][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.357708][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.364059][T22464] [ 1131.366362][T22464] Uninit was stored to memory at: [ 1131.371365][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.377062][T22464] __msan_chain_origin+0x50/0x90 [ 1131.382005][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.387094][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.392017][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.396495][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.401150][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.407193][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.413350][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.418542][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.423370][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.427849][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.434147][T22464] [ 1131.436450][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1131.443099][T22464] do_recvmmsg+0xbf/0x22c0 [ 1131.447494][T22464] do_recvmmsg+0xbf/0x22c0 [ 1131.607394][T22464] not chained 690000 origins [ 1131.612033][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1131.620702][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.630783][T22464] Call Trace: [ 1131.634091][T22464] dump_stack+0x21c/0x280 [ 1131.638437][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1131.644186][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1131.649395][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1131.654955][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1131.661037][T22464] ? _copy_from_user+0x201/0x310 [ 1131.665987][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1131.671191][T22464] __msan_chain_origin+0x50/0x90 [ 1131.676137][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.681273][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.686226][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.690756][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1131.695975][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1131.701888][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1131.707099][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1131.712395][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1131.717162][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1131.721940][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.726637][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.732721][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.738884][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.744115][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.748975][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.753492][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.759828][T22464] RIP: 0023:0xf7fe8549 [ 1131.763892][T22464] Code: Bad RIP value. [ 1131.767950][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1131.776338][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1131.784288][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1131.792236][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1131.800182][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1131.808128][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1131.816082][T22464] Uninit was stored to memory at: [ 1131.821092][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.826786][T22464] __msan_chain_origin+0x50/0x90 [ 1131.831703][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.836790][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.841709][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.846185][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.850850][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.856895][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.863027][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.868203][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.873030][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.877516][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.883808][T22464] [ 1131.886121][T22464] Uninit was stored to memory at: [ 1131.891124][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.896817][T22464] __msan_chain_origin+0x50/0x90 [ 1131.901751][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.906842][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.911755][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.916233][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.920885][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.926969][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.933101][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1131.938285][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1131.943113][T22464] do_SYSENTER_32+0x73/0x90 [ 1131.947609][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.953903][T22464] [ 1131.956206][T22464] Uninit was stored to memory at: [ 1131.961208][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1131.966916][T22464] __msan_chain_origin+0x50/0x90 [ 1131.971833][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1131.976921][T22464] get_compat_msghdr+0x108/0x2b0 [ 1131.981836][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1131.986341][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1131.991003][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.997062][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.003210][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.008390][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.013218][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.017697][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.023996][T22464] [ 1132.026332][T22464] Uninit was stored to memory at: [ 1132.031337][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.037029][T22464] __msan_chain_origin+0x50/0x90 [ 1132.041943][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.047030][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.051943][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.056506][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.061161][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.067204][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.073338][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.078512][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.083341][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.087828][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.094126][T22464] [ 1132.096429][T22464] Uninit was stored to memory at: [ 1132.101434][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.107128][T22464] __msan_chain_origin+0x50/0x90 [ 1132.112044][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.117131][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.122048][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.126528][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.131182][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.137225][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.143355][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.148589][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.153428][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.157937][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.164241][T22464] [ 1132.166548][T22464] Uninit was stored to memory at: [ 1132.171562][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.177260][T22464] __msan_chain_origin+0x50/0x90 [ 1132.182183][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.187369][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.192284][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.196763][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.201419][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.207464][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.213605][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.218781][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.223611][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.228093][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.234436][T22464] [ 1132.236738][T22464] Uninit was stored to memory at: [ 1132.241740][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.247436][T22464] __msan_chain_origin+0x50/0x90 [ 1132.252350][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.257441][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.262356][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.266835][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.271511][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.277556][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.283687][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.288899][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.293726][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.298206][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.304502][T22464] [ 1132.306820][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1132.313468][T22464] do_recvmmsg+0xbf/0x22c0 [ 1132.317861][T22464] do_recvmmsg+0xbf/0x22c0 [ 1132.455364][T22464] not chained 700000 origins [ 1132.459999][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1132.468673][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1132.478734][T22464] Call Trace: [ 1132.482040][T22464] dump_stack+0x21c/0x280 [ 1132.486382][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1132.492138][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1132.497342][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1132.502898][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1132.508979][T22464] ? _copy_from_user+0x201/0x310 [ 1132.513924][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1132.519131][T22464] __msan_chain_origin+0x50/0x90 [ 1132.524089][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.529223][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.534176][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.538717][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1132.543941][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1132.549943][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1132.555156][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1132.560449][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1132.565225][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1132.570024][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.574731][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.580818][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.586984][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.592206][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.597071][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.601591][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.607924][T22464] RIP: 0023:0xf7fe8549 [ 1132.611984][T22464] Code: Bad RIP value. [ 1132.616060][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1132.624487][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1132.632470][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1132.640450][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1132.648415][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1132.656380][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1132.664335][T22464] Uninit was stored to memory at: [ 1132.669345][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.675041][T22464] __msan_chain_origin+0x50/0x90 [ 1132.679960][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.685048][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.690097][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.694576][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.699229][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.705404][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.711587][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.716765][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.721593][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.726096][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.732392][T22464] [ 1132.734703][T22464] Uninit was stored to memory at: [ 1132.739719][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.745415][T22464] __msan_chain_origin+0x50/0x90 [ 1132.750332][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.755419][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.760332][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.764811][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.769464][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.775506][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.781655][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.786836][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.791752][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.796354][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.802649][T22464] [ 1132.804953][T22464] Uninit was stored to memory at: [ 1132.809956][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.815653][T22464] __msan_chain_origin+0x50/0x90 [ 1132.820574][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.825674][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.830597][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.835075][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.839742][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.845791][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.851922][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.857097][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.861927][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.866408][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.872719][T22464] [ 1132.875023][T22464] Uninit was stored to memory at: [ 1132.880044][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.885739][T22464] __msan_chain_origin+0x50/0x90 [ 1132.890659][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.895755][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.900673][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.905153][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.909806][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.915849][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.921981][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.927155][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1132.931982][T22464] do_SYSENTER_32+0x73/0x90 [ 1132.936481][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.942792][T22464] [ 1132.945096][T22464] Uninit was stored to memory at: [ 1132.950097][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1132.955794][T22464] __msan_chain_origin+0x50/0x90 [ 1132.960708][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1132.965792][T22464] get_compat_msghdr+0x108/0x2b0 [ 1132.970705][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1132.975185][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1132.979838][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.985887][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.992019][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1132.997193][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.002023][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.006503][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.014021][T22464] [ 1133.016326][T22464] Uninit was stored to memory at: [ 1133.021333][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.027044][T22464] __msan_chain_origin+0x50/0x90 [ 1133.031961][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.037049][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.041961][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.046442][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.051097][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.057143][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.063273][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.068447][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.073273][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.077846][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.084141][T22464] [ 1133.086443][T22464] Uninit was stored to memory at: [ 1133.091444][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.097161][T22464] __msan_chain_origin+0x50/0x90 [ 1133.102087][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.107178][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.112093][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.116579][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.121235][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.127276][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.133407][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.138604][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.143438][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.147920][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.154292][T22464] [ 1133.156612][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1133.163274][T22464] do_recvmmsg+0xbf/0x22c0 [ 1133.167666][T22464] do_recvmmsg+0xbf/0x22c0 [ 1133.311218][T22464] not chained 710000 origins [ 1133.315991][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1133.324661][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.334756][T22464] Call Trace: [ 1133.338061][T22464] dump_stack+0x21c/0x280 [ 1133.342405][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1133.348145][T22464] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1133.353977][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1133.359189][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1133.364751][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1133.370832][T22464] ? _copy_from_user+0x201/0x310 [ 1133.375780][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1133.381011][T22464] __msan_chain_origin+0x50/0x90 [ 1133.385964][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.391098][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.396050][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.400583][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1133.405807][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1133.411716][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1133.416930][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1133.422226][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1133.426999][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1133.431773][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.436468][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.442552][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.448729][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.453944][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.458810][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.463323][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.469652][T22464] RIP: 0023:0xf7fe8549 [ 1133.473805][T22464] Code: Bad RIP value. [ 1133.477867][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1133.486282][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1133.494249][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1133.502323][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1133.510274][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1133.518222][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1133.526184][T22464] Uninit was stored to memory at: [ 1133.531192][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.536884][T22464] __msan_chain_origin+0x50/0x90 [ 1133.541804][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.546894][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.551808][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.556285][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.560947][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.566988][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.573207][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.578412][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.583238][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.587724][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.594022][T22464] [ 1133.596337][T22464] Uninit was stored to memory at: [ 1133.601341][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.607047][T22464] __msan_chain_origin+0x50/0x90 [ 1133.611960][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.617045][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.621961][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.626439][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.631094][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.637140][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.643272][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.648451][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.653327][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.657807][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.664120][T22464] [ 1133.666421][T22464] Uninit was stored to memory at: [ 1133.671423][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.677119][T22464] __msan_chain_origin+0x50/0x90 [ 1133.682036][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.687124][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.692043][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.696523][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.701183][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.707225][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.713360][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.718532][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.723358][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.727836][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.734131][T22464] [ 1133.736435][T22464] Uninit was stored to memory at: [ 1133.741435][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.747234][T22464] __msan_chain_origin+0x50/0x90 [ 1133.752150][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.757238][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.762152][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.766630][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.771286][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.777359][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.783493][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.788667][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.793500][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.797980][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.804278][T22464] [ 1133.806582][T22464] Uninit was stored to memory at: [ 1133.811584][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.817278][T22464] __msan_chain_origin+0x50/0x90 [ 1133.822194][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.827280][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.832221][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.836703][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.841359][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.847403][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.853541][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.858718][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.863545][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.868025][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.874319][T22464] [ 1133.876638][T22464] Uninit was stored to memory at: [ 1133.881640][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.887335][T22464] __msan_chain_origin+0x50/0x90 [ 1133.892249][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.897339][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.902252][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.906734][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.911390][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.917452][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.923584][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.928769][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1133.933599][T22464] do_SYSENTER_32+0x73/0x90 [ 1133.938078][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.944374][T22464] [ 1133.946678][T22464] Uninit was stored to memory at: [ 1133.951684][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1133.957379][T22464] __msan_chain_origin+0x50/0x90 [ 1133.962294][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1133.967383][T22464] get_compat_msghdr+0x108/0x2b0 [ 1133.972296][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1133.976775][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1133.981428][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.987489][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.993628][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1133.998802][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.003629][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.008106][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.014400][T22464] [ 1134.016703][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1134.023362][T22464] do_recvmmsg+0xbf/0x22c0 [ 1134.027783][T22464] do_recvmmsg+0xbf/0x22c0 [ 1134.163779][T22464] not chained 720000 origins [ 1134.168414][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1134.177086][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.187148][T22464] Call Trace: [ 1134.190455][T22464] dump_stack+0x21c/0x280 [ 1134.194803][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1134.200550][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1134.205776][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1134.211336][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1134.217418][T22464] ? _copy_from_user+0x201/0x310 [ 1134.222378][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1134.227624][T22464] __msan_chain_origin+0x50/0x90 [ 1134.232576][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.237719][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.242689][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.247220][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1134.252441][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1134.258344][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1134.263678][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1134.268973][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1134.273743][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1134.278527][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.283236][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.289329][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.295491][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.300710][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.305572][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.310085][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.316459][T22464] RIP: 0023:0xf7fe8549 [ 1134.320521][T22464] Code: Bad RIP value. [ 1134.324587][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1134.332998][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1134.340971][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.348936][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1134.356886][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1134.364836][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.372800][T22464] Uninit was stored to memory at: [ 1134.377807][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1134.383500][T22464] __msan_chain_origin+0x50/0x90 [ 1134.388414][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.393499][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.398415][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.402891][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.407545][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.413588][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.419718][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.424899][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.429722][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.434203][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.440516][T22464] [ 1134.442819][T22464] Uninit was stored to memory at: [ 1134.447820][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1134.453515][T22464] __msan_chain_origin+0x50/0x90 [ 1134.458432][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.463562][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.468475][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.473015][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.477669][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.483731][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.489862][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.495042][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.499868][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.504350][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.510649][T22464] [ 1134.512962][T22464] Uninit was stored to memory at: [ 1134.517961][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1134.523657][T22464] __msan_chain_origin+0x50/0x90 [ 1134.528570][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.533661][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.538577][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.543057][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.547712][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.553758][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.559906][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.565082][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.569907][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.574386][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.580681][T22464] [ 1134.582982][T22464] Uninit was stored to memory at: [ 1134.587982][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1134.593686][T22464] __msan_chain_origin+0x50/0x90 [ 1134.598600][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.603686][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.608601][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.613099][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.617752][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.623795][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.629924][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.635099][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.639924][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.644411][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.650707][T22464] [ 1134.653009][T22464] Uninit was stored to memory at: [ 1134.658009][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1134.663705][T22464] __msan_chain_origin+0x50/0x90 [ 1134.668643][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.673731][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.678653][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.683134][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.687787][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.693829][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.699958][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.705135][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.709960][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.714438][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.720732][T22464] [ 1134.723047][T22464] Uninit was stored to memory at: [ 1134.728047][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1134.733743][T22464] __msan_chain_origin+0x50/0x90 [ 1134.738657][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.743743][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.748655][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.753136][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.757790][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.763835][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.769974][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.775151][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.779977][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.784558][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.790852][T22464] [ 1134.793152][T22464] Uninit was stored to memory at: [ 1134.798161][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1134.803857][T22464] __msan_chain_origin+0x50/0x90 [ 1134.808769][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1134.813863][T22464] get_compat_msghdr+0x108/0x2b0 [ 1134.818788][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1134.823276][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1134.827929][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.833971][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.840104][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1134.845281][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1134.850112][T22464] do_SYSENTER_32+0x73/0x90 [ 1134.854594][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.860891][T22464] [ 1134.863192][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1134.869840][T22464] do_recvmmsg+0xbf/0x22c0 [ 1134.874236][T22464] do_recvmmsg+0xbf/0x22c0 [ 1135.012785][T22464] not chained 730000 origins [ 1135.017508][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1135.026179][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.036243][T22464] Call Trace: [ 1135.039574][T22464] dump_stack+0x21c/0x280 [ 1135.043929][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1135.049678][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.054887][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1135.060491][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1135.066586][T22464] ? _copy_from_user+0x201/0x310 [ 1135.071539][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.076756][T22464] __msan_chain_origin+0x50/0x90 [ 1135.081706][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.086848][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.091801][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.096430][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.101640][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1135.107545][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.112761][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1135.118054][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1135.122827][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1135.127649][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.132349][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.138436][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.144604][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.149817][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.154678][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.159201][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.165549][T22464] RIP: 0023:0xf7fe8549 [ 1135.169612][T22464] Code: Bad RIP value. [ 1135.173696][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1135.182107][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1135.190059][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1135.198010][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1135.205968][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1135.213917][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.221871][T22464] Uninit was stored to memory at: [ 1135.226878][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1135.232575][T22464] __msan_chain_origin+0x50/0x90 [ 1135.237490][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.242577][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.247489][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.251985][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.256642][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.262687][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.268830][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.274014][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.278843][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.283326][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.289710][T22464] [ 1135.292015][T22464] Uninit was stored to memory at: [ 1135.297024][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1135.302719][T22464] __msan_chain_origin+0x50/0x90 [ 1135.307633][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.312722][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.317678][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.322158][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.326821][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.332862][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.338996][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.344173][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.349000][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.353479][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.359775][T22464] [ 1135.362077][T22464] Uninit was stored to memory at: [ 1135.367080][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1135.372783][T22464] __msan_chain_origin+0x50/0x90 [ 1135.377700][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.382787][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.387706][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.392186][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.396840][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.402890][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.409020][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.414198][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.419025][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.423515][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.429822][T22464] [ 1135.432125][T22464] Uninit was stored to memory at: [ 1135.437130][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1135.442850][T22464] __msan_chain_origin+0x50/0x90 [ 1135.447781][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.452869][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.457784][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.462271][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.466925][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.472971][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.479102][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.484277][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.489105][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.493586][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.499899][T22464] [ 1135.502213][T22464] Uninit was stored to memory at: [ 1135.507229][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1135.512930][T22464] __msan_chain_origin+0x50/0x90 [ 1135.517847][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.522934][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.527845][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.532325][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.536982][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.543024][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.549154][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.554337][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.559162][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.563657][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.569950][T22464] [ 1135.572262][T22464] Uninit was stored to memory at: [ 1135.577264][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1135.582959][T22464] __msan_chain_origin+0x50/0x90 [ 1135.587872][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.592974][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.597884][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.602378][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.607050][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.613110][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.619252][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.624435][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.629260][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.633740][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.640034][T22464] [ 1135.642338][T22464] Uninit was stored to memory at: [ 1135.647340][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1135.653047][T22464] __msan_chain_origin+0x50/0x90 [ 1135.657961][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.663050][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.667961][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.672440][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.677093][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.683135][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.689275][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1135.694451][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1135.699283][T22464] do_SYSENTER_32+0x73/0x90 [ 1135.703763][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.710058][T22464] [ 1135.712374][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1135.719022][T22464] do_recvmmsg+0xbf/0x22c0 [ 1135.723416][T22464] do_recvmmsg+0xbf/0x22c0 [ 1135.879288][T22464] not chained 740000 origins [ 1135.883929][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1135.892608][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.902664][T22464] Call Trace: [ 1135.905969][T22464] dump_stack+0x21c/0x280 [ 1135.910323][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1135.916084][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.921289][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1135.926844][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1135.932925][T22464] ? _copy_from_user+0x201/0x310 [ 1135.937873][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.943079][T22464] __msan_chain_origin+0x50/0x90 [ 1135.948026][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1135.953159][T22464] get_compat_msghdr+0x108/0x2b0 [ 1135.958109][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1135.962639][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.967853][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1135.973758][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1135.978967][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1135.984260][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1135.989032][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1135.993805][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1135.998506][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.004594][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.010759][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.015975][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.020874][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.025389][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.031714][T22464] RIP: 0023:0xf7fe8549 [ 1136.035773][T22464] Code: Bad RIP value. [ 1136.039838][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1136.048249][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1136.056234][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1136.064207][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.072171][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1136.080150][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.088104][T22464] Uninit was stored to memory at: [ 1136.093110][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.098818][T22464] __msan_chain_origin+0x50/0x90 [ 1136.103737][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.108823][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.113738][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.118217][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.122868][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.128908][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.135036][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.140247][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.145075][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.149555][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.155852][T22464] [ 1136.158155][T22464] Uninit was stored to memory at: [ 1136.163158][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.168866][T22464] __msan_chain_origin+0x50/0x90 [ 1136.173791][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.178888][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.183813][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.188292][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.192944][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.198988][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.205121][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.210296][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.215122][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.219601][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.225923][T22464] [ 1136.228236][T22464] Uninit was stored to memory at: [ 1136.233250][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.238944][T22464] __msan_chain_origin+0x50/0x90 [ 1136.243980][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.249066][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.253987][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.258536][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.263191][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.269233][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.275539][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.280716][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.285545][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.290035][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.296343][T22464] [ 1136.298646][T22464] Uninit was stored to memory at: [ 1136.303738][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.309438][T22464] __msan_chain_origin+0x50/0x90 [ 1136.314353][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.319455][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.324375][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.328858][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.333512][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.339559][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.345699][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.350876][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.355705][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.360183][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.366478][T22464] [ 1136.368780][T22464] Uninit was stored to memory at: [ 1136.373782][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.379476][T22464] __msan_chain_origin+0x50/0x90 [ 1136.384407][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.389501][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.394414][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.398902][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.403581][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.409622][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.415754][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.420930][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.425777][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.430256][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.436551][T22464] [ 1136.438855][T22464] Uninit was stored to memory at: [ 1136.443877][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.449683][T22464] __msan_chain_origin+0x50/0x90 [ 1136.454600][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.459686][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.464598][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.469078][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.473735][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.479781][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.485914][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.491089][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.495913][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.500408][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.506711][T22464] [ 1136.509023][T22464] Uninit was stored to memory at: [ 1136.514029][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.519732][T22464] __msan_chain_origin+0x50/0x90 [ 1136.524650][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.529740][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.534652][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.539130][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.543800][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.549844][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.555978][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.561158][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.565985][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.570465][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.576760][T22464] [ 1136.579151][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1136.585935][T22464] do_recvmmsg+0xbf/0x22c0 [ 1136.590443][T22464] do_recvmmsg+0xbf/0x22c0 [ 1136.728051][T22464] not chained 750000 origins [ 1136.732688][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1136.741357][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.751416][T22464] Call Trace: [ 1136.754729][T22464] dump_stack+0x21c/0x280 [ 1136.759084][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1136.764852][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1136.770063][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1136.775619][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1136.781706][T22464] ? _copy_from_user+0x201/0x310 [ 1136.786653][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1136.791864][T22464] __msan_chain_origin+0x50/0x90 [ 1136.796825][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.801957][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.806911][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.811439][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1136.816655][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1136.822565][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1136.827775][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1136.833069][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1136.837843][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1136.842618][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.847333][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.853423][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.859594][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.864811][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.869673][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.874183][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.880510][T22464] RIP: 0023:0xf7fe8549 [ 1136.884569][T22464] Code: Bad RIP value. [ 1136.888634][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1136.897038][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1136.904988][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1136.912970][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.920918][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1136.928864][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.936821][T22464] Uninit was stored to memory at: [ 1136.941831][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1136.947526][T22464] __msan_chain_origin+0x50/0x90 [ 1136.952450][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1136.957538][T22464] get_compat_msghdr+0x108/0x2b0 [ 1136.962451][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1136.966929][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1136.971585][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.977629][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.983762][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1136.988948][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1136.993777][T22464] do_SYSENTER_32+0x73/0x90 [ 1136.998277][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.004581][T22464] [ 1137.006888][T22464] Uninit was stored to memory at: [ 1137.011895][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.017593][T22464] __msan_chain_origin+0x50/0x90 [ 1137.022510][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.027597][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.032513][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.036990][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.041642][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.047684][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.053815][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.058989][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.063815][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.068307][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.074617][T22464] [ 1137.076923][T22464] Uninit was stored to memory at: [ 1137.081927][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.087621][T22464] __msan_chain_origin+0x50/0x90 [ 1137.092552][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.097640][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.102553][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.107034][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.111710][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.117750][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.123881][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.129056][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.133884][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.138387][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.144681][T22464] [ 1137.146984][T22464] Uninit was stored to memory at: [ 1137.151995][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.157689][T22464] __msan_chain_origin+0x50/0x90 [ 1137.162624][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.167719][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.172690][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.177170][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.181914][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.187960][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.194092][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.199270][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.204112][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.208593][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.214891][T22464] [ 1137.217191][T22464] Uninit was stored to memory at: [ 1137.222193][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.227892][T22464] __msan_chain_origin+0x50/0x90 [ 1137.232804][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.237893][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.242805][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.247284][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.251940][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.258078][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.264210][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.269458][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.274286][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.278766][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.285062][T22464] [ 1137.287367][T22464] Uninit was stored to memory at: [ 1137.292375][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.298073][T22464] __msan_chain_origin+0x50/0x90 [ 1137.302988][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.308074][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.312985][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.317475][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.322127][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.328168][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.334302][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.339475][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.344306][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.348787][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.355082][T22464] [ 1137.357385][T22464] Uninit was stored to memory at: [ 1137.362386][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.368081][T22464] __msan_chain_origin+0x50/0x90 [ 1137.372996][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.378082][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.382994][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.387471][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.392124][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.398179][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.404310][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.409482][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.414311][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.418789][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.425085][T22464] [ 1137.427389][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1137.434046][T22464] do_recvmmsg+0xbf/0x22c0 [ 1137.438439][T22464] do_recvmmsg+0xbf/0x22c0 [ 1137.576789][T22464] not chained 760000 origins [ 1137.581431][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1137.590101][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.600154][T22464] Call Trace: [ 1137.603457][T22464] dump_stack+0x21c/0x280 [ 1137.607810][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1137.613563][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1137.618788][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1137.624376][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1137.630464][T22464] ? _copy_from_user+0x201/0x310 [ 1137.635416][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1137.640623][T22464] __msan_chain_origin+0x50/0x90 [ 1137.645573][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.650740][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.655692][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.660222][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1137.665457][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1137.671357][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1137.676567][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1137.681864][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1137.686629][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1137.691403][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.696104][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.702189][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.708351][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.713565][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.718462][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.722978][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.729306][T22464] RIP: 0023:0xf7fe8549 [ 1137.733370][T22464] Code: Bad RIP value. [ 1137.737432][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1137.745852][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1137.753831][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1137.761806][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.769780][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1137.777747][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.785705][T22464] Uninit was stored to memory at: [ 1137.790712][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.796405][T22464] __msan_chain_origin+0x50/0x90 [ 1137.801320][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.806407][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.811321][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.815797][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.820454][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.826498][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.832629][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.837804][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.842634][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.847115][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.853411][T22464] [ 1137.855712][T22464] Uninit was stored to memory at: [ 1137.860715][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.866409][T22464] __msan_chain_origin+0x50/0x90 [ 1137.871473][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.876558][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.881473][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.885953][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.890606][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.896647][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.902864][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.908038][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.912960][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.917441][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.923738][T22464] [ 1137.926041][T22464] Uninit was stored to memory at: [ 1137.931045][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1137.936840][T22464] __msan_chain_origin+0x50/0x90 [ 1137.941778][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1137.946869][T22464] get_compat_msghdr+0x108/0x2b0 [ 1137.951794][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1137.956284][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1137.960942][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.966985][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.973118][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1137.978295][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1137.983121][T22464] do_SYSENTER_32+0x73/0x90 [ 1137.987608][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.993905][T22464] [ 1137.996210][T22464] Uninit was stored to memory at: [ 1138.001217][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.006917][T22464] __msan_chain_origin+0x50/0x90 [ 1138.011831][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.016920][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.021836][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.026315][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.030970][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.037061][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.043237][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.048419][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.053375][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.057857][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.064155][T22464] [ 1138.066461][T22464] Uninit was stored to memory at: [ 1138.071466][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.077188][T22464] __msan_chain_origin+0x50/0x90 [ 1138.082101][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.087190][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.092122][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.096685][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.101359][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.107406][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.113539][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.118718][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.123543][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.128067][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.134362][T22464] [ 1138.136664][T22464] Uninit was stored to memory at: [ 1138.141666][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.147360][T22464] __msan_chain_origin+0x50/0x90 [ 1138.152278][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.157423][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.162336][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.166817][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.171472][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.177517][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.183653][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.188829][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.193779][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.198267][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.204563][T22464] [ 1138.206866][T22464] Uninit was stored to memory at: [ 1138.211869][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.217563][T22464] __msan_chain_origin+0x50/0x90 [ 1138.222477][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.227564][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.232485][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.236964][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.241619][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.247664][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.253801][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.258975][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.263803][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.268352][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.274693][T22464] [ 1138.277011][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1138.283660][T22464] do_recvmmsg+0xbf/0x22c0 [ 1138.288053][T22464] do_recvmmsg+0xbf/0x22c0 [ 1138.429363][T22464] not chained 770000 origins [ 1138.434091][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1138.442761][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.452817][T22464] Call Trace: [ 1138.456120][T22464] dump_stack+0x21c/0x280 [ 1138.460477][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1138.466242][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1138.471447][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1138.477003][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1138.483094][T22464] ? _copy_from_user+0x201/0x310 [ 1138.488045][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1138.493253][T22464] __msan_chain_origin+0x50/0x90 [ 1138.498203][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.503338][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.508292][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.512822][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1138.518040][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1138.523948][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1138.529160][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1138.534455][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1138.539220][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1138.543993][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.548700][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.554784][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.560949][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.566160][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.571030][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.575546][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.581882][T22464] RIP: 0023:0xf7fe8549 [ 1138.585941][T22464] Code: Bad RIP value. [ 1138.590004][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1138.598413][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1138.606404][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1138.614356][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.622304][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1138.630260][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.638225][T22464] Uninit was stored to memory at: [ 1138.643244][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.648938][T22464] __msan_chain_origin+0x50/0x90 [ 1138.653853][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.658944][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.663870][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.668347][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.673002][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.679047][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.685197][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.690373][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.695199][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.699694][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.706006][T22464] [ 1138.708308][T22464] Uninit was stored to memory at: [ 1138.713312][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.719007][T22464] __msan_chain_origin+0x50/0x90 [ 1138.723920][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.729006][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.733921][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.738401][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.743055][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.749098][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.755233][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.760409][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.765236][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.769729][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.776025][T22464] [ 1138.778327][T22464] Uninit was stored to memory at: [ 1138.783336][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.789030][T22464] __msan_chain_origin+0x50/0x90 [ 1138.793945][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.799030][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.803947][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.808528][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.813184][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.819229][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.825381][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.830572][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.835397][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.839881][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.846177][T22464] [ 1138.848481][T22464] Uninit was stored to memory at: [ 1138.853484][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.859181][T22464] __msan_chain_origin+0x50/0x90 [ 1138.864129][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.869217][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.874131][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.878609][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.883265][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.889312][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.895470][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.900650][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.905476][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.909958][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.916251][T22464] [ 1138.918551][T22464] Uninit was stored to memory at: [ 1138.923554][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.929253][T22464] __msan_chain_origin+0x50/0x90 [ 1138.934167][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1138.939256][T22464] get_compat_msghdr+0x108/0x2b0 [ 1138.944170][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1138.948662][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1138.953315][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.959359][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.965491][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1138.970668][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1138.975493][T22464] do_SYSENTER_32+0x73/0x90 [ 1138.979974][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.986274][T22464] [ 1138.988593][T22464] Uninit was stored to memory at: [ 1138.993596][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1138.999292][T22464] __msan_chain_origin+0x50/0x90 [ 1139.004242][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.009334][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.014251][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.018732][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.023389][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.029433][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.035568][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.040746][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.045571][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.050051][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.056346][T22464] [ 1139.058648][T22464] Uninit was stored to memory at: [ 1139.063648][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.069346][T22464] __msan_chain_origin+0x50/0x90 [ 1139.074266][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.079352][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.084262][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.088742][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.093437][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.099479][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.105610][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.110784][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.115613][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.120092][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.126386][T22464] [ 1139.128692][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1139.135358][T22464] do_recvmmsg+0xbf/0x22c0 [ 1139.139756][T22464] do_recvmmsg+0xbf/0x22c0 [ 1139.311874][T22464] not chained 780000 origins [ 1139.316633][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1139.325310][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.335367][T22464] Call Trace: [ 1139.338673][T22464] dump_stack+0x21c/0x280 [ 1139.343023][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1139.348771][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1139.353985][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1139.359543][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1139.365619][T22464] ? _copy_from_user+0x201/0x310 [ 1139.370583][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1139.375789][T22464] __msan_chain_origin+0x50/0x90 [ 1139.380763][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.385897][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.390851][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.395383][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1139.400594][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1139.406494][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1139.411709][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1139.416999][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1139.421801][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1139.426575][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.431271][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.437355][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.443525][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.448726][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.453560][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.458042][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.464450][T22464] RIP: 0023:0xf7fe8549 [ 1139.468492][T22464] Code: Bad RIP value. [ 1139.472535][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1139.480923][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1139.488871][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.496819][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.504768][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1139.512818][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.520771][T22464] Uninit was stored to memory at: [ 1139.525774][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.531469][T22464] __msan_chain_origin+0x50/0x90 [ 1139.536382][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.541472][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.546386][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.550921][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.555576][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.561619][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.567750][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.572925][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.577754][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.582235][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.588530][T22464] [ 1139.590835][T22464] Uninit was stored to memory at: [ 1139.595844][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.601539][T22464] __msan_chain_origin+0x50/0x90 [ 1139.606453][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.611541][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.616454][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.620936][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.625591][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.631647][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.637777][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.642951][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.647781][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.652264][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.658557][T22464] [ 1139.660861][T22464] Uninit was stored to memory at: [ 1139.665884][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.671581][T22464] __msan_chain_origin+0x50/0x90 [ 1139.676499][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.681841][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.686772][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.691252][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.695908][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.701953][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.708083][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.713260][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.718088][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.722569][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.728862][T22464] [ 1139.731165][T22464] Uninit was stored to memory at: [ 1139.736177][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.741871][T22464] __msan_chain_origin+0x50/0x90 [ 1139.746788][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.751879][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.756795][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.761367][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.766020][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.772065][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.778226][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.783433][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.788281][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.792763][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.799059][T22464] [ 1139.801366][T22464] Uninit was stored to memory at: [ 1139.806368][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.812066][T22464] __msan_chain_origin+0x50/0x90 [ 1139.816981][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.822068][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.826980][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.831463][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.836122][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.842171][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.848303][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.853478][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.858305][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.862786][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.869082][T22464] [ 1139.871384][T22464] Uninit was stored to memory at: [ 1139.876389][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.882084][T22464] __msan_chain_origin+0x50/0x90 [ 1139.887003][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.892195][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.897114][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.901594][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.906251][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.912381][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.918511][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.923689][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.928523][T22464] do_SYSENTER_32+0x73/0x90 [ 1139.933006][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.939304][T22464] [ 1139.941609][T22464] Uninit was stored to memory at: [ 1139.946611][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1139.952308][T22464] __msan_chain_origin+0x50/0x90 [ 1139.957223][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1139.962312][T22464] get_compat_msghdr+0x108/0x2b0 [ 1139.967230][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1139.971713][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1139.976365][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.982410][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.988550][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1139.993833][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1139.998662][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.003142][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.009449][T22464] [ 1140.011772][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1140.018430][T22464] do_recvmmsg+0xbf/0x22c0 [ 1140.022885][T22464] do_recvmmsg+0xbf/0x22c0 [ 1140.202478][T22464] not chained 790000 origins [ 1140.207120][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1140.215788][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.225847][T22464] Call Trace: [ 1140.229151][T22464] dump_stack+0x21c/0x280 [ 1140.233497][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1140.239244][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1140.244457][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1140.250013][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1140.256095][T22464] ? _copy_from_user+0x201/0x310 [ 1140.261048][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1140.266254][T22464] __msan_chain_origin+0x50/0x90 [ 1140.271204][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.276337][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.281293][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.285825][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1140.291034][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1140.296939][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1140.302139][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1140.307405][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1140.312148][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1140.316890][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.321558][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.327609][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.333742][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.338921][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.343751][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.348235][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.354535][T22464] RIP: 0023:0xf7fe8549 [ 1140.358577][T22464] Code: Bad RIP value. [ 1140.362619][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1140.371008][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1140.378958][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1140.386907][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1140.394866][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1140.402826][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1140.410788][T22464] Uninit was stored to memory at: [ 1140.415795][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1140.421492][T22464] __msan_chain_origin+0x50/0x90 [ 1140.426408][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.431493][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.436407][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.441108][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.445823][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.451870][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.458003][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.463180][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.468007][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.472490][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.478784][T22464] [ 1140.481088][T22464] Uninit was stored to memory at: [ 1140.486091][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1140.491788][T22464] __msan_chain_origin+0x50/0x90 [ 1140.496714][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.501822][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.506744][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.511224][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.515882][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.521927][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.528076][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.533253][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.538086][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.542569][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.548863][T22464] [ 1140.551171][T22464] Uninit was stored to memory at: [ 1140.556174][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1140.561868][T22464] __msan_chain_origin+0x50/0x90 [ 1140.566782][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.571868][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.576782][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.581260][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.585917][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.591962][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.598092][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.603280][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.608112][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.612631][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.618926][T22464] [ 1140.621229][T22464] Uninit was stored to memory at: [ 1140.626263][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1140.631960][T22464] __msan_chain_origin+0x50/0x90 [ 1140.636871][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.641959][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.646871][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.651351][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.656008][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.662056][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.668186][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.673362][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.678192][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.682674][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.688968][T22464] [ 1140.691270][T22464] Uninit was stored to memory at: [ 1140.696273][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1140.701970][T22464] __msan_chain_origin+0x50/0x90 [ 1140.706883][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.712001][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.716913][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.721390][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.726044][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.732088][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.738217][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.743391][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.748218][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.752700][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.759005][T22464] [ 1140.761307][T22464] Uninit was stored to memory at: [ 1140.766313][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1140.772142][T22464] __msan_chain_origin+0x50/0x90 [ 1140.777062][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.782336][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.787303][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.791785][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.796440][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.802482][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.808610][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.813788][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.818615][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.823096][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.829395][T22464] [ 1140.831712][T22464] Uninit was stored to memory at: [ 1140.836715][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1140.842414][T22464] __msan_chain_origin+0x50/0x90 [ 1140.847331][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1140.852420][T22464] get_compat_msghdr+0x108/0x2b0 [ 1140.857336][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1140.861816][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1140.866469][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.872521][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.878652][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1140.883828][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1140.888656][T22464] do_SYSENTER_32+0x73/0x90 [ 1140.893137][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.899454][T22464] [ 1140.901758][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1140.908432][T22464] do_recvmmsg+0xbf/0x22c0 [ 1140.912824][T22464] do_recvmmsg+0xbf/0x22c0 [ 1141.085107][T22464] not chained 800000 origins [ 1141.089916][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1141.098582][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.108653][T22464] Call Trace: [ 1141.111958][T22464] dump_stack+0x21c/0x280 [ 1141.116303][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1141.122059][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1141.127270][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1141.132829][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1141.138911][T22464] ? _copy_from_user+0x201/0x310 [ 1141.143861][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1141.149068][T22464] __msan_chain_origin+0x50/0x90 [ 1141.154029][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.159168][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.164122][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.168649][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1141.174058][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1141.179995][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1141.185223][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1141.190520][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1141.195292][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1141.200067][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.204768][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.210852][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.217026][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.222243][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.227132][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.231646][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.237971][T22464] RIP: 0023:0xf7fe8549 [ 1141.242042][T22464] Code: Bad RIP value. [ 1141.246110][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1141.254567][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1141.262543][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1141.270523][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1141.278501][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1141.286477][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1141.294464][T22464] Uninit was stored to memory at: [ 1141.299492][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1141.305190][T22464] __msan_chain_origin+0x50/0x90 [ 1141.310106][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.315194][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.320109][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.324588][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.329238][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.335280][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.341413][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.346589][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.351416][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.355896][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.362190][T22464] [ 1141.364493][T22464] Uninit was stored to memory at: [ 1141.369507][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1141.375201][T22464] __msan_chain_origin+0x50/0x90 [ 1141.380122][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.385327][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.390242][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.394721][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.399382][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.405432][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.411564][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.416740][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.421567][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.426049][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.432431][T22464] [ 1141.434735][T22464] Uninit was stored to memory at: [ 1141.439737][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1141.445432][T22464] __msan_chain_origin+0x50/0x90 [ 1141.450368][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.455471][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.460384][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.464862][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.469518][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.475563][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.481696][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.486872][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.491699][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.496185][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.502495][T22464] [ 1141.504797][T22464] Uninit was stored to memory at: [ 1141.509817][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1141.515510][T22464] __msan_chain_origin+0x50/0x90 [ 1141.520424][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.525510][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.530423][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.534901][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.539558][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.545603][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.551840][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.557015][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.561843][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.566325][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.572623][T22464] [ 1141.574925][T22464] Uninit was stored to memory at: [ 1141.579933][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1141.585734][T22464] __msan_chain_origin+0x50/0x90 [ 1141.590659][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.595753][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.600668][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.605146][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.609798][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.615839][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.621970][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.627144][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.631971][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.636453][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.642748][T22464] [ 1141.645052][T22464] Uninit was stored to memory at: [ 1141.650054][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1141.655748][T22464] __msan_chain_origin+0x50/0x90 [ 1141.660662][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.665747][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.670657][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.675136][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.679789][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.685833][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.691966][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.697142][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.701969][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.706450][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.712748][T22464] [ 1141.715052][T22464] Uninit was stored to memory at: [ 1141.720057][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1141.725753][T22464] __msan_chain_origin+0x50/0x90 [ 1141.730669][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1141.735755][T22464] get_compat_msghdr+0x108/0x2b0 [ 1141.740667][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1141.745146][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1141.749799][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.755843][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.761975][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1141.767603][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1141.772439][T22464] do_SYSENTER_32+0x73/0x90 [ 1141.776918][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.783215][T22464] [ 1141.785518][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1141.792168][T22464] do_recvmmsg+0xbf/0x22c0 [ 1141.796588][T22464] do_recvmmsg+0xbf/0x22c0 [ 1141.963254][T22464] not chained 810000 origins [ 1141.967894][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1141.976564][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.986622][T22464] Call Trace: [ 1141.989926][T22464] dump_stack+0x21c/0x280 [ 1141.994315][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1142.000075][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.005289][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1142.010849][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1142.016935][T22464] ? _copy_from_user+0x201/0x310 [ 1142.021906][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.027114][T22464] __msan_chain_origin+0x50/0x90 [ 1142.032064][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.037204][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.042160][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.046689][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.051899][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1142.057807][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.063026][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1142.068324][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1142.073095][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1142.077874][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.082577][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.088666][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.094836][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.100071][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.104936][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.109456][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.115783][T22464] RIP: 0023:0xf7fe8549 [ 1142.119846][T22464] Code: Bad RIP value. [ 1142.123923][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1142.132338][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1142.140314][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1142.148292][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1142.156275][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1142.164257][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1142.172245][T22464] Uninit was stored to memory at: [ 1142.177289][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1142.183028][T22464] __msan_chain_origin+0x50/0x90 [ 1142.187975][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.193103][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.198060][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.202574][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.207258][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.213334][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.219497][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.224708][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.229565][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.234076][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.240398][T22464] [ 1142.242720][T22464] Uninit was stored to memory at: [ 1142.247753][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1142.253480][T22464] __msan_chain_origin+0x50/0x90 [ 1142.258427][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.263545][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.268484][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.272994][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.277678][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.283751][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.289919][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.295121][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.299977][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.304498][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.310818][T22464] [ 1142.313146][T22464] Uninit was stored to memory at: [ 1142.318189][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1142.323942][T22464] __msan_chain_origin+0x50/0x90 [ 1142.328897][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.334030][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.338981][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.343481][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.348137][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.354181][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.360418][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.365600][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.370428][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.374906][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.381201][T22464] [ 1142.383504][T22464] Uninit was stored to memory at: [ 1142.388506][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1142.394202][T22464] __msan_chain_origin+0x50/0x90 [ 1142.399118][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.404208][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.409118][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.413599][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.418253][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.424297][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.430428][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.435603][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.440430][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.444959][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.451256][T22464] [ 1142.453559][T22464] Uninit was stored to memory at: [ 1142.458562][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1142.464258][T22464] __msan_chain_origin+0x50/0x90 [ 1142.469188][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.474307][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.479236][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.483727][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.488381][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.494427][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.500559][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.505760][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.510589][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.515069][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.521365][T22464] [ 1142.523668][T22464] Uninit was stored to memory at: [ 1142.528671][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1142.534366][T22464] __msan_chain_origin+0x50/0x90 [ 1142.539279][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.544367][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.549367][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.553847][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.558502][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.564546][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.570692][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.575868][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.580701][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.585182][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.591478][T22464] [ 1142.593779][T22464] Uninit was stored to memory at: [ 1142.598779][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1142.604475][T22464] __msan_chain_origin+0x50/0x90 [ 1142.609391][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.614479][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.619394][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.624172][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1142.628825][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.634872][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.641003][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1142.646176][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1142.651108][T22464] do_SYSENTER_32+0x73/0x90 [ 1142.655589][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.661884][T22464] [ 1142.664195][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1142.670846][T22464] do_recvmmsg+0xbf/0x22c0 [ 1142.675238][T22464] do_recvmmsg+0xbf/0x22c0 [ 1142.884196][T22464] not chained 820000 origins [ 1142.888805][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1142.897470][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.907593][T22464] Call Trace: [ 1142.910873][T22464] dump_stack+0x21c/0x280 [ 1142.915186][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1142.921030][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.926240][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1142.931783][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1142.937831][T22464] ? _copy_from_user+0x201/0x310 [ 1142.942747][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.947925][T22464] __msan_chain_origin+0x50/0x90 [ 1142.952874][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1142.957976][T22464] get_compat_msghdr+0x108/0x2b0 [ 1142.962898][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1142.967389][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.972584][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1142.978477][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1142.983673][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1142.989007][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1142.993751][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1142.998498][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.003163][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.009236][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.015370][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.020552][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.025431][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.029916][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.036221][T22464] RIP: 0023:0xf7fe8549 [ 1143.040262][T22464] Code: Bad RIP value. [ 1143.044400][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1143.052787][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1143.060736][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.068703][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.076654][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1143.084606][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.092587][T22464] Uninit was stored to memory at: [ 1143.097597][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.103294][T22464] __msan_chain_origin+0x50/0x90 [ 1143.108227][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.113331][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.118243][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.122722][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.127420][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.133485][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.139644][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.144820][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.149770][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.154263][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.160645][T22464] [ 1143.162947][T22464] Uninit was stored to memory at: [ 1143.167950][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.173647][T22464] __msan_chain_origin+0x50/0x90 [ 1143.178585][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.183682][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.188599][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.193079][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.197735][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.203781][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.209914][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.215091][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.219918][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.224401][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.230698][T22464] [ 1143.233001][T22464] Uninit was stored to memory at: [ 1143.238005][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.243701][T22464] __msan_chain_origin+0x50/0x90 [ 1143.248615][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.253703][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.258616][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.263101][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.267754][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.273797][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.279929][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.285107][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.289935][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.294417][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.300715][T22464] [ 1143.303018][T22464] Uninit was stored to memory at: [ 1143.308021][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.313720][T22464] __msan_chain_origin+0x50/0x90 [ 1143.318640][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.323729][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.328643][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.333123][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.337778][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.343823][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.349959][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.355136][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.359971][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.364450][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.370745][T22464] [ 1143.373046][T22464] Uninit was stored to memory at: [ 1143.378068][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.383765][T22464] __msan_chain_origin+0x50/0x90 [ 1143.388680][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.393898][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.398815][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.403293][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.407959][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.414003][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.420160][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.425338][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.430165][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.434664][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.441046][T22464] [ 1143.443348][T22464] Uninit was stored to memory at: [ 1143.448349][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.454050][T22464] __msan_chain_origin+0x50/0x90 [ 1143.458963][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.464054][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.468971][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.473469][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.478122][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.484183][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.490315][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.495509][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.500336][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.504819][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.511145][T22464] [ 1143.513449][T22464] Uninit was stored to memory at: [ 1143.518454][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.524151][T22464] __msan_chain_origin+0x50/0x90 [ 1143.529077][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.534165][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.539080][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.543574][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.548247][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.554296][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.560426][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.565601][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.570429][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.574908][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.581206][T22464] [ 1143.583510][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1143.590159][T22464] do_recvmmsg+0xbf/0x22c0 [ 1143.594549][T22464] do_recvmmsg+0xbf/0x22c0 [ 1143.745477][T22464] not chained 830000 origins [ 1143.750112][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1143.758790][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.768848][T22464] Call Trace: [ 1143.772153][T22464] dump_stack+0x21c/0x280 [ 1143.776501][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1143.782251][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1143.787458][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1143.793017][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1143.799102][T22464] ? _copy_from_user+0x201/0x310 [ 1143.804058][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1143.809267][T22464] __msan_chain_origin+0x50/0x90 [ 1143.814215][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.819350][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.824303][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.828834][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1143.834052][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1143.839979][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1143.845191][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1143.850495][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1143.855263][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1143.860039][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.864736][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.870820][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.876983][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1143.882200][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1143.887058][T22464] do_SYSENTER_32+0x73/0x90 [ 1143.891571][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.897908][T22464] RIP: 0023:0xf7fe8549 [ 1143.901970][T22464] Code: Bad RIP value. [ 1143.906034][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1143.914449][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1143.922421][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.930398][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.938373][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1143.946348][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.954332][T22464] Uninit was stored to memory at: [ 1143.959374][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1143.965102][T22464] __msan_chain_origin+0x50/0x90 [ 1143.970047][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1143.975141][T22464] get_compat_msghdr+0x108/0x2b0 [ 1143.980059][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1143.984542][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1143.989213][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.995255][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.001386][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.006562][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.011390][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.015870][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.022174][T22464] [ 1144.024475][T22464] Uninit was stored to memory at: [ 1144.029481][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.035177][T22464] __msan_chain_origin+0x50/0x90 [ 1144.040091][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.045176][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.050090][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.054685][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.059342][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.065386][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.071517][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.076692][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.081520][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.086001][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.092304][T22464] [ 1144.094606][T22464] Uninit was stored to memory at: [ 1144.099608][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.105319][T22464] __msan_chain_origin+0x50/0x90 [ 1144.110232][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.115320][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.120233][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.124713][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.129368][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.135411][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.141544][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.146825][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.151679][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.156168][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.162465][T22464] [ 1144.164768][T22464] Uninit was stored to memory at: [ 1144.169779][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.175475][T22464] __msan_chain_origin+0x50/0x90 [ 1144.180388][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.185474][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.190404][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.194943][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.199603][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.205646][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.211787][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.216961][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.221790][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.226271][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.232656][T22464] [ 1144.234961][T22464] Uninit was stored to memory at: [ 1144.239964][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.245660][T22464] __msan_chain_origin+0x50/0x90 [ 1144.250577][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.255709][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.260647][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.265133][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.269926][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.275969][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.282100][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.287274][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.292103][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.296586][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.302880][T22464] [ 1144.305183][T22464] Uninit was stored to memory at: [ 1144.310187][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.315883][T22464] __msan_chain_origin+0x50/0x90 [ 1144.320799][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.325890][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.330805][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.335285][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.339943][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.345986][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.352115][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.357289][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.362115][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.366598][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.372893][T22464] [ 1144.375215][T22464] Uninit was stored to memory at: [ 1144.380223][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.385916][T22464] __msan_chain_origin+0x50/0x90 [ 1144.390831][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.395937][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.400850][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.405344][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.409998][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.416047][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.422178][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.427369][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.432460][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.436939][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.443231][T22464] [ 1144.445536][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1144.452201][T22464] do_recvmmsg+0xbf/0x22c0 [ 1144.456592][T22464] do_recvmmsg+0xbf/0x22c0 [ 1144.594957][T22464] not chained 840000 origins [ 1144.599597][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1144.608268][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.618334][T22464] Call Trace: [ 1144.621646][T22464] dump_stack+0x21c/0x280 [ 1144.625991][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1144.631740][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1144.636949][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1144.642516][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1144.648596][T22464] ? _copy_from_user+0x201/0x310 [ 1144.653558][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1144.658774][T22464] __msan_chain_origin+0x50/0x90 [ 1144.663734][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.668870][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.673824][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.678371][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1144.683581][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1144.689576][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1144.694791][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1144.700085][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1144.704885][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1144.709657][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.714457][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.720542][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.726705][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.731925][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.736791][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.741338][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.747666][T22464] RIP: 0023:0xf7fe8549 [ 1144.751728][T22464] Code: Bad RIP value. [ 1144.755797][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1144.764204][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1144.772154][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1144.780101][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1144.788152][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1144.796101][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1144.804055][T22464] Uninit was stored to memory at: [ 1144.809161][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.814855][T22464] __msan_chain_origin+0x50/0x90 [ 1144.819781][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.824868][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.829783][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.834262][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.838920][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.844963][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.851126][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.856306][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.861134][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.865614][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.871909][T22464] [ 1144.874212][T22464] Uninit was stored to memory at: [ 1144.879220][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.884917][T22464] __msan_chain_origin+0x50/0x90 [ 1144.889832][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.894919][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.899843][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.904320][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.908974][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.915016][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.921147][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.926324][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1144.931151][T22464] do_SYSENTER_32+0x73/0x90 [ 1144.935647][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.941959][T22464] [ 1144.944264][T22464] Uninit was stored to memory at: [ 1144.949265][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1144.954962][T22464] __msan_chain_origin+0x50/0x90 [ 1144.959879][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1144.964982][T22464] get_compat_msghdr+0x108/0x2b0 [ 1144.969915][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1144.974394][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1144.979047][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.985092][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.991237][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1144.996439][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.001284][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.005772][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.012066][T22464] [ 1145.014370][T22464] Uninit was stored to memory at: [ 1145.019376][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.025070][T22464] __msan_chain_origin+0x50/0x90 [ 1145.029988][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.035079][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.040006][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.044484][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.049140][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.055190][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.061318][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.066492][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.071319][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.075828][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.082126][T22464] [ 1145.084428][T22464] Uninit was stored to memory at: [ 1145.089443][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.095139][T22464] __msan_chain_origin+0x50/0x90 [ 1145.100054][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.105141][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.110053][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.114534][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.119188][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.125232][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.131364][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.136539][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.141367][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.145848][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.152141][T22464] [ 1145.154455][T22464] Uninit was stored to memory at: [ 1145.159478][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.165240][T22464] __msan_chain_origin+0x50/0x90 [ 1145.170173][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.175267][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.180180][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.184661][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.189333][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.195374][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.201563][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.206748][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.211576][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.216061][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.222374][T22464] [ 1145.224680][T22464] Uninit was stored to memory at: [ 1145.229687][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.235382][T22464] __msan_chain_origin+0x50/0x90 [ 1145.240300][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.245386][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.250297][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.254792][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.259447][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.265514][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.271644][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.276818][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.281643][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.286125][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.292418][T22464] [ 1145.294721][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1145.301372][T22464] do_recvmmsg+0xbf/0x22c0 [ 1145.305764][T22464] do_recvmmsg+0xbf/0x22c0 [ 1145.442251][T22464] not chained 850000 origins [ 1145.446977][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1145.455656][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.465713][T22464] Call Trace: [ 1145.469017][T22464] dump_stack+0x21c/0x280 [ 1145.473360][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1145.479111][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1145.484320][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1145.489880][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1145.495963][T22464] ? _copy_from_user+0x201/0x310 [ 1145.500916][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1145.506146][T22464] __msan_chain_origin+0x50/0x90 [ 1145.511113][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.516251][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.521211][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.525775][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1145.530988][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1145.536978][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1145.542191][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1145.547485][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1145.552259][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1145.557033][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.561736][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.567821][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.573985][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.579205][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.584076][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.588591][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.594927][T22464] RIP: 0023:0xf7fe8549 [ 1145.598986][T22464] Code: Bad RIP value. [ 1145.603050][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1145.611466][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1145.619441][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1145.627450][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1145.635417][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1145.643409][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1145.651366][T22464] Uninit was stored to memory at: [ 1145.656373][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.662069][T22464] __msan_chain_origin+0x50/0x90 [ 1145.666985][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.672217][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.677131][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.681609][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.686408][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.692452][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.698582][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.703759][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.708587][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.713160][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.719469][T22464] [ 1145.721779][T22464] Uninit was stored to memory at: [ 1145.726782][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.732477][T22464] __msan_chain_origin+0x50/0x90 [ 1145.737396][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.742483][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.747409][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.751902][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.756554][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.762602][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.768744][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.773942][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.778790][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.783322][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.789619][T22464] [ 1145.791922][T22464] Uninit was stored to memory at: [ 1145.796943][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.802640][T22464] __msan_chain_origin+0x50/0x90 [ 1145.807553][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.812656][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.817570][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.822050][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.826793][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.832841][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.838993][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.844168][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.848998][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.853476][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.859776][T22464] [ 1145.862091][T22464] Uninit was stored to memory at: [ 1145.867118][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.872815][T22464] __msan_chain_origin+0x50/0x90 [ 1145.877730][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.882819][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.887733][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.892213][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.896869][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.902929][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.909058][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.914231][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.919060][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.923541][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.929835][T22464] [ 1145.932138][T22464] Uninit was stored to memory at: [ 1145.937140][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1145.942835][T22464] __msan_chain_origin+0x50/0x90 [ 1145.947749][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1145.952838][T22464] get_compat_msghdr+0x108/0x2b0 [ 1145.957752][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1145.962233][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1145.966908][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.972952][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.979083][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1145.984263][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1145.989110][T22464] do_SYSENTER_32+0x73/0x90 [ 1145.993668][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.999995][T22464] [ 1146.002305][T22464] Uninit was stored to memory at: [ 1146.007329][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.013034][T22464] __msan_chain_origin+0x50/0x90 [ 1146.017978][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.023066][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.027978][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.032461][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.037151][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.043196][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.049328][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.054555][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.059385][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.063862][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.070178][T22464] [ 1146.072482][T22464] Uninit was stored to memory at: [ 1146.077483][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.083177][T22464] __msan_chain_origin+0x50/0x90 [ 1146.088091][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.093179][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.098089][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.102569][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.107222][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.113283][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.119414][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.124609][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.129445][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.133926][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.140329][T22464] [ 1146.142635][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1146.149286][T22464] do_recvmmsg+0xbf/0x22c0 [ 1146.153677][T22464] do_recvmmsg+0xbf/0x22c0 [ 1146.297819][T22464] not chained 860000 origins [ 1146.302493][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1146.311164][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.321250][T22464] Call Trace: [ 1146.324553][T22464] dump_stack+0x21c/0x280 [ 1146.328903][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1146.334652][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1146.339859][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1146.345417][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1146.351498][T22464] ? _copy_from_user+0x201/0x310 [ 1146.356445][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1146.361651][T22464] __msan_chain_origin+0x50/0x90 [ 1146.366607][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.371750][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.376705][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.381235][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1146.386447][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1146.392352][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1146.397564][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1146.402869][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1146.407641][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1146.412412][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.417159][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.423246][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.429413][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.434630][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.439495][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.444024][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.450367][T22464] RIP: 0023:0xf7fe8549 [ 1146.454427][T22464] Code: Bad RIP value. [ 1146.458492][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1146.466931][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1146.474889][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1146.483000][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1146.491039][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1146.498995][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1146.506949][T22464] Uninit was stored to memory at: [ 1146.511992][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.517685][T22464] __msan_chain_origin+0x50/0x90 [ 1146.522600][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.527686][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.532617][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.537097][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.541750][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.547795][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.553929][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.559104][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.563931][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.568411][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.574707][T22464] [ 1146.577011][T22464] Uninit was stored to memory at: [ 1146.582013][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.587711][T22464] __msan_chain_origin+0x50/0x90 [ 1146.592626][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.597711][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.602627][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.607106][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.611870][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.617917][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.624053][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.629228][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.634057][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.638537][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.644858][T22464] [ 1146.647161][T22464] Uninit was stored to memory at: [ 1146.652183][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.657892][T22464] __msan_chain_origin+0x50/0x90 [ 1146.662910][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.668010][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.672938][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.677418][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.682073][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.688119][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.694269][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.699443][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.704286][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.708770][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.715064][T22464] [ 1146.717371][T22464] Uninit was stored to memory at: [ 1146.722371][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.728066][T22464] __msan_chain_origin+0x50/0x90 [ 1146.733084][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.738199][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.743120][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.747599][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.752261][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.758391][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.765215][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.770390][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.775223][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.779819][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.786113][T22464] [ 1146.788412][T22464] Uninit was stored to memory at: [ 1146.793415][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.799110][T22464] __msan_chain_origin+0x50/0x90 [ 1146.804029][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.809115][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.814146][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.818654][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.823325][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.829369][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.835501][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.840741][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.845581][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.850061][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.856358][T22464] [ 1146.858673][T22464] Uninit was stored to memory at: [ 1146.863680][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.869503][T22464] __msan_chain_origin+0x50/0x90 [ 1146.874545][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.879633][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.884548][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.889025][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.893729][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.899804][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.905936][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.911113][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.915943][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.920567][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.926898][T22464] [ 1146.929200][T22464] Uninit was stored to memory at: [ 1146.934236][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1146.939931][T22464] __msan_chain_origin+0x50/0x90 [ 1146.944865][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1146.949950][T22464] get_compat_msghdr+0x108/0x2b0 [ 1146.954863][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1146.959342][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1146.963996][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.970037][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.976176][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1146.981373][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1146.986208][T22464] do_SYSENTER_32+0x73/0x90 [ 1146.990705][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.997006][T22464] [ 1146.999324][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1147.005976][T22464] do_recvmmsg+0xbf/0x22c0 [ 1147.010368][T22464] do_recvmmsg+0xbf/0x22c0 [ 1147.146222][T22464] not chained 870000 origins [ 1147.151005][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1147.159681][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1147.169734][T22464] Call Trace: [ 1147.173039][T22464] dump_stack+0x21c/0x280 [ 1147.177384][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1147.183134][T22464] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1147.188959][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1147.194198][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1147.199752][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1147.205863][T22464] ? _copy_from_user+0x201/0x310 [ 1147.210811][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1147.216049][T22464] __msan_chain_origin+0x50/0x90 [ 1147.220999][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.226147][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.231098][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.235631][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1147.240840][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1147.246742][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1147.251953][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1147.257246][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1147.262024][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1147.266797][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.271495][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.277585][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.283758][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.288973][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.293836][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.298348][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.304677][T22464] RIP: 0023:0xf7fe8549 [ 1147.308720][T22464] Code: Bad RIP value. [ 1147.312761][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1147.321149][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1147.329099][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1147.337092][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1147.345055][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1147.353017][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1147.360978][T22464] Uninit was stored to memory at: [ 1147.365991][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1147.371685][T22464] __msan_chain_origin+0x50/0x90 [ 1147.376598][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.381684][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.386599][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.391099][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.395754][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.401800][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.407931][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.413106][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.417935][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.422416][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.428713][T22464] [ 1147.431018][T22464] Uninit was stored to memory at: [ 1147.436018][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1147.441711][T22464] __msan_chain_origin+0x50/0x90 [ 1147.446658][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.451746][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.456658][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.461137][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.465793][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.471836][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.477969][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.483146][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.488007][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.492488][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.498787][T22464] [ 1147.501091][T22464] Uninit was stored to memory at: [ 1147.506094][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1147.511793][T22464] __msan_chain_origin+0x50/0x90 [ 1147.516707][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.521794][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.526707][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.531185][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.535836][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.541878][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.548027][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.553202][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.558029][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.562511][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.568806][T22464] [ 1147.571108][T22464] Uninit was stored to memory at: [ 1147.576120][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1147.581815][T22464] __msan_chain_origin+0x50/0x90 [ 1147.586834][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.591920][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.596846][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.601324][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.606010][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.612053][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.618194][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.623369][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.628193][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.632672][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.638965][T22464] [ 1147.641300][T22464] Uninit was stored to memory at: [ 1147.646302][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1147.651999][T22464] __msan_chain_origin+0x50/0x90 [ 1147.656911][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.662014][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.666927][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.671424][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.676076][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.682120][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.688248][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.693424][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.698275][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.702757][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.709052][T22464] [ 1147.711356][T22464] Uninit was stored to memory at: [ 1147.716360][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1147.722062][T22464] __msan_chain_origin+0x50/0x90 [ 1147.726977][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.732067][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.736984][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.741462][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.746120][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.752163][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.758302][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.763480][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.768393][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.772881][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.779182][T22464] [ 1147.781519][T22464] Uninit was stored to memory at: [ 1147.786521][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1147.792216][T22464] __msan_chain_origin+0x50/0x90 [ 1147.797131][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1147.802219][T22464] get_compat_msghdr+0x108/0x2b0 [ 1147.807165][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1147.811644][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1147.816296][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.822341][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.828483][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1147.833660][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1147.838493][T22464] do_SYSENTER_32+0x73/0x90 [ 1147.842975][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.849270][T22464] [ 1147.851574][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1147.858221][T22464] do_recvmmsg+0xbf/0x22c0 [ 1147.862611][T22464] do_recvmmsg+0xbf/0x22c0 [ 1148.027664][T22464] not chained 880000 origins [ 1148.032306][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1148.040980][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.051039][T22464] Call Trace: [ 1148.054344][T22464] dump_stack+0x21c/0x280 [ 1148.058691][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1148.064457][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.069662][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1148.075214][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1148.081293][T22464] ? _copy_from_user+0x201/0x310 [ 1148.086240][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.091456][T22464] __msan_chain_origin+0x50/0x90 [ 1148.096403][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.101539][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.106497][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.111044][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.116256][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1148.122160][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.127370][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1148.132666][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1148.137551][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1148.142445][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.147149][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.153237][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.159413][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.164809][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.169673][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.174200][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.180533][T22464] RIP: 0023:0xf7fe8549 [ 1148.184603][T22464] Code: Bad RIP value. [ 1148.188672][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1148.197090][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1148.205070][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1148.213046][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1148.221014][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1148.228976][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1148.236966][T22464] Uninit was stored to memory at: [ 1148.241976][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1148.247668][T22464] __msan_chain_origin+0x50/0x90 [ 1148.252601][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.257690][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.262604][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.267089][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.271745][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.277813][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.283953][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.289131][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.293958][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.298438][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.304733][T22464] [ 1148.307034][T22464] Uninit was stored to memory at: [ 1148.312035][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1148.317847][T22464] __msan_chain_origin+0x50/0x90 [ 1148.322773][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.327988][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.332919][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.337427][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.342083][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.348127][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.354258][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.359434][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.364418][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.368917][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.375216][T22464] [ 1148.377531][T22464] Uninit was stored to memory at: [ 1148.382538][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1148.388242][T22464] __msan_chain_origin+0x50/0x90 [ 1148.393162][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.398249][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.403165][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.407646][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.412301][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.418357][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.424501][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.429678][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.434596][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.439079][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.445372][T22464] [ 1148.447677][T22464] Uninit was stored to memory at: [ 1148.452680][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1148.458387][T22464] __msan_chain_origin+0x50/0x90 [ 1148.463399][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.468487][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.473402][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.477878][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.482538][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.488584][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.494743][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.499920][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.504749][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.509251][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.515545][T22464] [ 1148.517846][T22464] Uninit was stored to memory at: [ 1148.522849][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1148.528545][T22464] __msan_chain_origin+0x50/0x90 [ 1148.533460][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.538547][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.543481][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.547977][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.552634][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.558677][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.564815][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.570004][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.574943][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.579426][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.585723][T22464] [ 1148.588024][T22464] Uninit was stored to memory at: [ 1148.593077][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1148.598772][T22464] __msan_chain_origin+0x50/0x90 [ 1148.603690][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.608779][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.613693][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.618171][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.622826][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.628872][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.635007][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.640184][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.645012][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.649494][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.655790][T22464] [ 1148.658091][T22464] Uninit was stored to memory at: [ 1148.663093][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1148.668797][T22464] __msan_chain_origin+0x50/0x90 [ 1148.673717][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.678805][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.683717][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.688289][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1148.692956][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.699006][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.705150][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1148.710325][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1148.715156][T22464] do_SYSENTER_32+0x73/0x90 [ 1148.719637][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.725932][T22464] [ 1148.728234][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1148.734881][T22464] do_recvmmsg+0xbf/0x22c0 [ 1148.739295][T22464] do_recvmmsg+0xbf/0x22c0 [ 1148.889437][T22464] not chained 890000 origins [ 1148.894080][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1148.902748][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.912872][T22464] Call Trace: [ 1148.916175][T22464] dump_stack+0x21c/0x280 [ 1148.920523][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1148.926256][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.931462][T22464] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1148.937291][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.942523][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1148.948078][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1148.954164][T22464] ? _copy_from_user+0x201/0x310 [ 1148.959116][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.964326][T22464] __msan_chain_origin+0x50/0x90 [ 1148.969280][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1148.974415][T22464] get_compat_msghdr+0x108/0x2b0 [ 1148.979390][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1148.983920][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1148.989133][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1148.995045][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1149.000255][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1149.005548][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1149.010316][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1149.015094][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.019804][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.025894][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.032062][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.037282][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.042148][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.046662][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.052991][T22464] RIP: 0023:0xf7fe8549 [ 1149.057053][T22464] Code: Bad RIP value. [ 1149.061120][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1149.069582][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1149.077551][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1149.085601][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1149.093550][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1149.101499][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1149.109582][T22464] Uninit was stored to memory at: [ 1149.114702][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1149.120438][T22464] __msan_chain_origin+0x50/0x90 [ 1149.125355][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.130500][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.135424][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.139902][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.144558][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.150621][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.156756][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.161932][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.166993][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.171494][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.177793][T22464] [ 1149.180145][T22464] Uninit was stored to memory at: [ 1149.185153][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1149.190851][T22464] __msan_chain_origin+0x50/0x90 [ 1149.195766][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.200859][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.205771][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.210248][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.214902][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.220945][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.227077][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.232253][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.237080][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.241559][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.247854][T22464] [ 1149.250156][T22464] Uninit was stored to memory at: [ 1149.255159][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1149.260855][T22464] __msan_chain_origin+0x50/0x90 [ 1149.265766][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.270854][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.275768][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.280250][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.284903][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.290945][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.297077][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.302252][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.307077][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.311558][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.317854][T22464] [ 1149.320158][T22464] Uninit was stored to memory at: [ 1149.325160][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1149.330852][T22464] __msan_chain_origin+0x50/0x90 [ 1149.335765][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.340851][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.345763][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.350242][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.354894][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.360937][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.367066][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.372243][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.377070][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.381550][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.387844][T22464] [ 1149.390145][T22464] Uninit was stored to memory at: [ 1149.395147][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1149.400852][T22464] __msan_chain_origin+0x50/0x90 [ 1149.405762][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.410849][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.415878][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.420357][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.425010][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.431066][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.437198][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.442461][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.447288][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.451774][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.458070][T22464] [ 1149.460374][T22464] Uninit was stored to memory at: [ 1149.465401][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1149.471098][T22464] __msan_chain_origin+0x50/0x90 [ 1149.476027][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.481116][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.486047][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.490529][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.495199][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.501258][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.507387][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.512567][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.517396][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.521877][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.528176][T22464] [ 1149.530492][T22464] Uninit was stored to memory at: [ 1149.535499][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1149.541197][T22464] __msan_chain_origin+0x50/0x90 [ 1149.546110][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.551197][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.556111][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.560588][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.565251][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.571297][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.577425][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.582600][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.587425][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.591905][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.598208][T22464] [ 1149.600522][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1149.607170][T22464] do_recvmmsg+0xbf/0x22c0 [ 1149.611564][T22464] do_recvmmsg+0xbf/0x22c0 [ 1149.785971][T22464] not chained 900000 origins [ 1149.790612][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1149.799304][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.809359][T22464] Call Trace: [ 1149.812667][T22464] dump_stack+0x21c/0x280 [ 1149.817011][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1149.822759][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1149.828002][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1149.833557][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1149.839639][T22464] ? _copy_from_user+0x201/0x310 [ 1149.844587][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1149.849794][T22464] __msan_chain_origin+0x50/0x90 [ 1149.854742][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1149.860102][T22464] get_compat_msghdr+0x108/0x2b0 [ 1149.865067][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1149.869600][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1149.874806][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1149.880718][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1149.885917][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1149.891188][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1149.895927][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1149.900673][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1149.905337][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.911393][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.917524][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1149.922706][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1149.927534][T22464] do_SYSENTER_32+0x73/0x90 [ 1149.932018][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.938321][T22464] RIP: 0023:0xf7fe8549 [ 1149.942361][T22464] Code: Bad RIP value. [ 1149.946402][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1149.954788][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1149.962738][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1149.970685][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1149.978635][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1149.986586][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1149.994545][T22464] Uninit was stored to memory at: [ 1149.999553][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.005253][T22464] __msan_chain_origin+0x50/0x90 [ 1150.010169][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.015254][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.020169][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.024646][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.029333][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.035382][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.041514][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.046688][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.051516][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.056000][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.062312][T22464] [ 1150.064619][T22464] Uninit was stored to memory at: [ 1150.069619][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.075313][T22464] __msan_chain_origin+0x50/0x90 [ 1150.080228][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.085315][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.090241][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.094729][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.099392][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.105440][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.111572][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.116746][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.121571][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.126051][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.132351][T22464] [ 1150.134653][T22464] Uninit was stored to memory at: [ 1150.139667][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.145367][T22464] __msan_chain_origin+0x50/0x90 [ 1150.150356][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.155462][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.160384][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.164876][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.169534][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.175612][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.181744][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.186988][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.191868][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.196398][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.202698][T22464] [ 1150.205001][T22464] Uninit was stored to memory at: [ 1150.210008][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.215702][T22464] __msan_chain_origin+0x50/0x90 [ 1150.220667][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.225756][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.230668][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.235148][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.239803][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.245901][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.252040][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.257265][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.262111][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.266592][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.272887][T22464] [ 1150.275189][T22464] Uninit was stored to memory at: [ 1150.280197][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.285918][T22464] __msan_chain_origin+0x50/0x90 [ 1150.290844][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.295936][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.300850][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.305416][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.310070][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.316113][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.322250][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.327425][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.332257][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.336736][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.343031][T22464] [ 1150.345333][T22464] Uninit was stored to memory at: [ 1150.350336][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.356032][T22464] __msan_chain_origin+0x50/0x90 [ 1150.360949][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.366037][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.370954][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.375434][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.380086][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.386140][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.392273][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.397448][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.402286][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.406779][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.413075][T22464] [ 1150.415376][T22464] Uninit was stored to memory at: [ 1150.420376][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.426069][T22464] __msan_chain_origin+0x50/0x90 [ 1150.430980][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.436070][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.440984][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.445465][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.450126][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.456172][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.462305][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.467480][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.472308][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.476789][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.483082][T22464] [ 1150.485385][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1150.492035][T22464] do_recvmmsg+0xbf/0x22c0 [ 1150.496424][T22464] do_recvmmsg+0xbf/0x22c0 [ 1150.634337][T22464] not chained 910000 origins [ 1150.638978][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1150.647645][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.657702][T22464] Call Trace: [ 1150.661008][T22464] dump_stack+0x21c/0x280 [ 1150.665355][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1150.671106][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1150.676313][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1150.681956][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1150.688031][T22464] ? _copy_from_user+0x201/0x310 [ 1150.692979][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1150.698184][T22464] __msan_chain_origin+0x50/0x90 [ 1150.703137][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.708281][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.713240][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.717773][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1150.722986][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1150.728890][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1150.734100][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1150.739514][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1150.744284][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1150.749055][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.753750][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.759865][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.766028][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.771252][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.776113][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.780624][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.786949][T22464] RIP: 0023:0xf7fe8549 [ 1150.791008][T22464] Code: Bad RIP value. [ 1150.795071][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1150.803491][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1150.811467][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1150.819440][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.827416][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1150.835391][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.843364][T22464] Uninit was stored to memory at: [ 1150.848378][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.854074][T22464] __msan_chain_origin+0x50/0x90 [ 1150.858993][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.864080][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.868992][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.873469][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.878159][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.884206][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.890336][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.895512][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.900341][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.904821][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.911119][T22464] [ 1150.913422][T22464] Uninit was stored to memory at: [ 1150.918424][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.924119][T22464] __msan_chain_origin+0x50/0x90 [ 1150.929033][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1150.934130][T22464] get_compat_msghdr+0x108/0x2b0 [ 1150.939045][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1150.943522][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1150.948175][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.954223][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.960353][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1150.965531][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1150.970359][T22464] do_SYSENTER_32+0x73/0x90 [ 1150.974840][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.981135][T22464] [ 1150.983437][T22464] Uninit was stored to memory at: [ 1150.988443][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1150.994148][T22464] __msan_chain_origin+0x50/0x90 [ 1150.999066][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.004153][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.009066][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.013544][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.018229][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.024284][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.030420][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.035597][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.040427][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.044906][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.051205][T22464] [ 1151.053507][T22464] Uninit was stored to memory at: [ 1151.058508][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.064320][T22464] __msan_chain_origin+0x50/0x90 [ 1151.069238][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.074330][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.079245][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.083734][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.088391][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.094435][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.100566][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.105740][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.110567][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.115049][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.121359][T22464] [ 1151.123661][T22464] Uninit was stored to memory at: [ 1151.128664][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.134359][T22464] __msan_chain_origin+0x50/0x90 [ 1151.139274][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.144385][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.149317][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.153812][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.158479][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.164649][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.170787][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.175969][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.180808][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.185300][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.191601][T22464] [ 1151.193908][T22464] Uninit was stored to memory at: [ 1151.199139][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.204860][T22464] __msan_chain_origin+0x50/0x90 [ 1151.209781][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.214867][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.219787][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.224264][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.228917][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.234959][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.241088][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.246288][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.251125][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.255712][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.262011][T22464] [ 1151.264315][T22464] Uninit was stored to memory at: [ 1151.269316][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.275008][T22464] __msan_chain_origin+0x50/0x90 [ 1151.279924][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.285013][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.289926][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.294455][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.299206][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.305294][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.311426][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.316599][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.321472][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.325956][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.332252][T22464] [ 1151.334554][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1151.341202][T22464] do_recvmmsg+0xbf/0x22c0 [ 1151.345593][T22464] do_recvmmsg+0xbf/0x22c0 [ 1151.486584][T22464] not chained 920000 origins [ 1151.491231][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1151.499900][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.509953][T22464] Call Trace: [ 1151.513253][T22464] dump_stack+0x21c/0x280 [ 1151.517595][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1151.523348][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1151.528557][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1151.534113][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1151.540196][T22464] ? _copy_from_user+0x201/0x310 [ 1151.545149][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1151.550355][T22464] __msan_chain_origin+0x50/0x90 [ 1151.555302][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.560435][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.565389][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.569918][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1151.575133][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1151.581037][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1151.586250][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1151.591541][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1151.596310][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1151.601083][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.605780][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.611982][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.618152][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.623369][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.628240][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.632757][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.639089][T22464] RIP: 0023:0xf7fe8549 [ 1151.643167][T22464] Code: Bad RIP value. [ 1151.647231][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1151.655644][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1151.663616][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1151.671593][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1151.679561][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1151.687510][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1151.695465][T22464] Uninit was stored to memory at: [ 1151.700472][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.706165][T22464] __msan_chain_origin+0x50/0x90 [ 1151.711170][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.716257][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.721172][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.725651][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.730305][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.736346][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.742475][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.747651][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.752477][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.756956][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.763249][T22464] [ 1151.765552][T22464] Uninit was stored to memory at: [ 1151.770555][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.776274][T22464] __msan_chain_origin+0x50/0x90 [ 1151.781217][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.786308][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.791223][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.795702][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.800357][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.806402][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.812534][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.817794][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.822620][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.827100][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.833578][T22464] [ 1151.835881][T22464] Uninit was stored to memory at: [ 1151.840889][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.846584][T22464] __msan_chain_origin+0x50/0x90 [ 1151.851497][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.856581][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.861495][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.865973][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.870626][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.876667][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.882798][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.887974][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.892799][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.897279][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.903580][T22464] [ 1151.905881][T22464] Uninit was stored to memory at: [ 1151.910882][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.916578][T22464] __msan_chain_origin+0x50/0x90 [ 1151.921492][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.926580][T22464] get_compat_msghdr+0x108/0x2b0 [ 1151.931618][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1151.936101][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1151.940771][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.946816][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.952946][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1151.958120][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1151.962947][T22464] do_SYSENTER_32+0x73/0x90 [ 1151.967425][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.973722][T22464] [ 1151.976044][T22464] Uninit was stored to memory at: [ 1151.981045][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1151.986747][T22464] __msan_chain_origin+0x50/0x90 [ 1151.991666][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1151.996760][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.001672][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.006151][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.010807][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.016852][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.022999][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.028182][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.033010][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.037493][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.043788][T22464] [ 1152.046090][T22464] Uninit was stored to memory at: [ 1152.051107][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.056803][T22464] __msan_chain_origin+0x50/0x90 [ 1152.061721][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.066807][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.071832][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.076310][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.080970][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.087012][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.093143][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.098319][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.103270][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.107750][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.114177][T22464] [ 1152.116483][T22464] Uninit was stored to memory at: [ 1152.121489][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.127185][T22464] __msan_chain_origin+0x50/0x90 [ 1152.132106][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.137193][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.142116][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.146614][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.151290][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.157338][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.163476][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.168656][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.173485][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.177968][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.184271][T22464] [ 1152.186576][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1152.193229][T22464] do_recvmmsg+0xbf/0x22c0 [ 1152.197619][T22464] do_recvmmsg+0xbf/0x22c0 [ 1152.333327][T22464] not chained 930000 origins [ 1152.337963][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1152.346633][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.356694][T22464] Call Trace: [ 1152.360002][T22464] dump_stack+0x21c/0x280 [ 1152.364348][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1152.370097][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1152.375308][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1152.380874][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1152.386953][T22464] ? _copy_from_user+0x201/0x310 [ 1152.391904][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1152.397111][T22464] __msan_chain_origin+0x50/0x90 [ 1152.402061][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.407202][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.412157][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.416690][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1152.421903][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1152.427810][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1152.433017][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1152.438314][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1152.443079][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1152.447849][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.452637][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.458723][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.464886][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.470105][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.474966][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.479483][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.485809][T22464] RIP: 0023:0xf7fe8549 [ 1152.489870][T22464] Code: Bad RIP value. [ 1152.493931][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1152.502374][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1152.510327][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1152.518277][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1152.526348][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1152.534296][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1152.542252][T22464] Uninit was stored to memory at: [ 1152.547259][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.552954][T22464] __msan_chain_origin+0x50/0x90 [ 1152.557899][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.562988][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.567902][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.572381][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.577037][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.583082][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.589214][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.594388][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.599214][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.603694][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.609987][T22464] [ 1152.612290][T22464] Uninit was stored to memory at: [ 1152.617292][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.622990][T22464] __msan_chain_origin+0x50/0x90 [ 1152.627906][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.632997][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.637910][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.642388][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.647041][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.653085][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.659216][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.664389][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.669214][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.673704][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.680006][T22464] [ 1152.682309][T22464] Uninit was stored to memory at: [ 1152.687310][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.693008][T22464] __msan_chain_origin+0x50/0x90 [ 1152.697922][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.703010][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.707927][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.712406][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.717060][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.723108][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.729237][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.734414][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.739239][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.743719][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.750014][T22464] [ 1152.752315][T22464] Uninit was stored to memory at: [ 1152.757316][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.763011][T22464] __msan_chain_origin+0x50/0x90 [ 1152.767925][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.773009][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.777938][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.782417][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.787072][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.793117][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.799245][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.804418][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.809246][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.813759][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.820056][T22464] [ 1152.822355][T22464] Uninit was stored to memory at: [ 1152.827369][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.833063][T22464] __msan_chain_origin+0x50/0x90 [ 1152.838022][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.843111][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.848025][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.852500][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.857158][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.863202][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.869332][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.874505][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.879334][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.883813][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.890106][T22464] [ 1152.892428][T22464] Uninit was stored to memory at: [ 1152.897434][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.903131][T22464] __msan_chain_origin+0x50/0x90 [ 1152.908050][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.913136][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.918056][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.922552][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.927207][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.933249][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.939382][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1152.944575][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1152.949402][T22464] do_SYSENTER_32+0x73/0x90 [ 1152.953881][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.960204][T22464] [ 1152.962513][T22464] Uninit was stored to memory at: [ 1152.967516][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1152.973225][T22464] __msan_chain_origin+0x50/0x90 [ 1152.978150][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1152.983252][T22464] get_compat_msghdr+0x108/0x2b0 [ 1152.988273][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1152.992754][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1152.997409][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.003458][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.009603][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.014794][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.019630][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.024114][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.030412][T22464] [ 1153.032714][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1153.039365][T22464] do_recvmmsg+0xbf/0x22c0 [ 1153.043755][T22464] do_recvmmsg+0xbf/0x22c0 [ 1153.193340][T22464] not chained 940000 origins [ 1153.197978][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1153.206648][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.216701][T22464] Call Trace: [ 1153.220006][T22464] dump_stack+0x21c/0x280 [ 1153.224355][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1153.230110][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1153.235316][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1153.240875][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1153.246955][T22464] ? _copy_from_user+0x201/0x310 [ 1153.251902][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1153.257105][T22464] __msan_chain_origin+0x50/0x90 [ 1153.262062][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.267198][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.272151][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.276681][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1153.281894][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1153.287799][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1153.293162][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1153.298456][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1153.303230][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1153.308003][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.312705][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.318791][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.324954][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.330178][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.335035][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.339557][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.345883][T22464] RIP: 0023:0xf7fe8549 [ 1153.349946][T22464] Code: Bad RIP value. [ 1153.354018][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1153.362436][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1153.370389][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1153.378337][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1153.386360][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1153.394307][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1153.402263][T22464] Uninit was stored to memory at: [ 1153.407278][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1153.412974][T22464] __msan_chain_origin+0x50/0x90 [ 1153.417891][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.422979][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.427894][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.432401][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.437082][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.443128][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.449263][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.454441][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.459272][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.463753][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.470051][T22464] [ 1153.472352][T22464] Uninit was stored to memory at: [ 1153.477352][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1153.483053][T22464] __msan_chain_origin+0x50/0x90 [ 1153.487992][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.493079][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.498005][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.502491][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.507143][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.513188][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.519324][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.524498][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.529325][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.533804][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.540097][T22464] [ 1153.542399][T22464] Uninit was stored to memory at: [ 1153.547415][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1153.553112][T22464] __msan_chain_origin+0x50/0x90 [ 1153.558062][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.563148][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.568063][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.572542][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.577196][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.583237][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.589367][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.594544][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.599373][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.603854][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.610153][T22464] [ 1153.612461][T22464] Uninit was stored to memory at: [ 1153.617461][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1153.623155][T22464] __msan_chain_origin+0x50/0x90 [ 1153.628073][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.633162][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.638081][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.642560][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.647215][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.653291][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.659421][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.664613][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.669447][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.673929][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.680223][T22464] [ 1153.682541][T22464] Uninit was stored to memory at: [ 1153.687542][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1153.693236][T22464] __msan_chain_origin+0x50/0x90 [ 1153.698152][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.703239][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.708154][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.712633][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.717289][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.723354][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.729499][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.734677][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.739502][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.743981][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.750276][T22464] [ 1153.752577][T22464] Uninit was stored to memory at: [ 1153.757579][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1153.763277][T22464] __msan_chain_origin+0x50/0x90 [ 1153.768191][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.773276][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.778189][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.782775][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.787434][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.793476][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.799608][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.804785][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.809611][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.814094][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.820389][T22464] [ 1153.822694][T22464] Uninit was stored to memory at: [ 1153.827698][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1153.833392][T22464] __msan_chain_origin+0x50/0x90 [ 1153.838308][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1153.843394][T22464] get_compat_msghdr+0x108/0x2b0 [ 1153.848309][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1153.852803][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1153.857471][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.863516][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.869649][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1153.874824][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1153.879668][T22464] do_SYSENTER_32+0x73/0x90 [ 1153.884167][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.890464][T22464] [ 1153.892767][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1153.899416][T22464] do_recvmmsg+0xbf/0x22c0 [ 1153.903808][T22464] do_recvmmsg+0xbf/0x22c0 [ 1154.055619][T22464] not chained 950000 origins [ 1154.060255][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1154.069014][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.079069][T22464] Call Trace: [ 1154.082373][T22464] dump_stack+0x21c/0x280 [ 1154.086715][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1154.092463][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1154.097684][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1154.103238][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1154.109315][T22464] ? _copy_from_user+0x201/0x310 [ 1154.114265][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1154.119478][T22464] __msan_chain_origin+0x50/0x90 [ 1154.124441][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.129586][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.134536][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.139063][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1154.144273][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1154.150176][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1154.155392][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1154.160685][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1154.165458][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1154.170240][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.174951][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.181043][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.187216][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.192434][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.197346][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.201859][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.208190][T22464] RIP: 0023:0xf7fe8549 [ 1154.212250][T22464] Code: Bad RIP value. [ 1154.216313][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1154.224728][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1154.232705][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1154.240680][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1154.248763][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1154.256713][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1154.264761][T22464] Uninit was stored to memory at: [ 1154.269773][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1154.275472][T22464] __msan_chain_origin+0x50/0x90 [ 1154.280396][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.285536][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.290451][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.294947][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.299604][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.305656][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.311792][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.316969][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.321804][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.326285][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.332583][T22464] [ 1154.334887][T22464] Uninit was stored to memory at: [ 1154.339890][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1154.345585][T22464] __msan_chain_origin+0x50/0x90 [ 1154.350501][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.355587][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.360502][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.364983][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.369641][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.375772][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.381901][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.387077][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.391905][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.396383][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.402678][T22464] [ 1154.404980][T22464] Uninit was stored to memory at: [ 1154.410001][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1154.415695][T22464] __msan_chain_origin+0x50/0x90 [ 1154.420612][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.425700][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.430614][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.435090][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.439744][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.445790][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.451943][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.457135][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.461961][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.466445][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.472842][T22464] [ 1154.475146][T22464] Uninit was stored to memory at: [ 1154.480165][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1154.485859][T22464] __msan_chain_origin+0x50/0x90 [ 1154.490773][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.495862][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.500777][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.505255][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.509913][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.515959][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.522092][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.527270][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.532217][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.536698][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.543116][T22464] [ 1154.545419][T22464] Uninit was stored to memory at: [ 1154.550422][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1154.556119][T22464] __msan_chain_origin+0x50/0x90 [ 1154.561036][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.566124][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.571037][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.575517][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.580170][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.586231][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.592368][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.597555][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.602392][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.606899][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.613194][T22464] [ 1154.615500][T22464] Uninit was stored to memory at: [ 1154.620505][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1154.626201][T22464] __msan_chain_origin+0x50/0x90 [ 1154.631137][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.636224][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.641141][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.645619][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.650274][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.656317][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.662450][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.667629][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.672480][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.676967][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.683263][T22464] [ 1154.685566][T22464] Uninit was stored to memory at: [ 1154.690570][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1154.696266][T22464] __msan_chain_origin+0x50/0x90 [ 1154.701190][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.706279][T22464] get_compat_msghdr+0x108/0x2b0 [ 1154.711192][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1154.715671][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1154.720324][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.726366][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.732497][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1154.737674][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1154.742517][T22464] do_SYSENTER_32+0x73/0x90 [ 1154.746996][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.753292][T22464] [ 1154.755600][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1154.762256][T22464] do_recvmmsg+0xbf/0x22c0 [ 1154.766648][T22464] do_recvmmsg+0xbf/0x22c0 [ 1154.921127][T22464] not chained 960000 origins [ 1154.925766][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1154.934437][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.944496][T22464] Call Trace: [ 1154.947799][T22464] dump_stack+0x21c/0x280 [ 1154.952231][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1154.957985][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1154.963193][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1154.968750][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1154.974837][T22464] ? _copy_from_user+0x201/0x310 [ 1154.979786][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1154.985003][T22464] __msan_chain_origin+0x50/0x90 [ 1154.989971][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1154.995144][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.000110][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.004678][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1155.009973][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1155.015894][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1155.021114][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1155.026410][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1155.031183][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1155.035957][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.040660][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.046744][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.052915][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.058133][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.063012][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.067524][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.073853][T22464] RIP: 0023:0xf7fe8549 [ 1155.077913][T22464] Code: Bad RIP value. [ 1155.081959][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1155.090348][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1155.098299][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.106248][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.114196][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1155.122271][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.130226][T22464] Uninit was stored to memory at: [ 1155.135242][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.140995][T22464] __msan_chain_origin+0x50/0x90 [ 1155.145912][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.151033][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.155961][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.160443][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.165097][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.171140][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.177289][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.182486][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.187319][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.191814][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.198243][T22464] [ 1155.200554][T22464] Uninit was stored to memory at: [ 1155.205614][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.211408][T22464] __msan_chain_origin+0x50/0x90 [ 1155.216323][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.221417][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.226355][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.230836][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.235527][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.241569][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.247803][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.252979][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.257825][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.262310][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.268604][T22464] [ 1155.270907][T22464] Uninit was stored to memory at: [ 1155.275910][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.281607][T22464] __msan_chain_origin+0x50/0x90 [ 1155.286524][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.291612][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.296526][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.301021][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.305692][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.311746][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.317883][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.323060][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.327887][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.332367][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.338667][T22464] [ 1155.340969][T22464] Uninit was stored to memory at: [ 1155.345972][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.351706][T22464] __msan_chain_origin+0x50/0x90 [ 1155.356661][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.361752][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.366668][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.371144][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.375800][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.381848][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.387981][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.393156][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.397982][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.402460][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.408755][T22464] [ 1155.411058][T22464] Uninit was stored to memory at: [ 1155.416058][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.421760][T22464] __msan_chain_origin+0x50/0x90 [ 1155.426674][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.431763][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.436677][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.441155][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.445810][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.451855][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.457984][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.463177][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.468003][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.472489][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.478786][T22464] [ 1155.481112][T22464] Uninit was stored to memory at: [ 1155.486115][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.491811][T22464] __msan_chain_origin+0x50/0x90 [ 1155.496741][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.501838][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.506770][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.511250][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.515909][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.521953][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.528087][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.533264][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.538091][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.542574][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.548869][T22464] [ 1155.551173][T22464] Uninit was stored to memory at: [ 1155.556175][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.561872][T22464] __msan_chain_origin+0x50/0x90 [ 1155.566787][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.571875][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.576788][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.581268][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.585936][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.591980][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.598128][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.603321][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.608146][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.612630][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.618925][T22464] [ 1155.621228][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1155.627879][T22464] do_recvmmsg+0xbf/0x22c0 [ 1155.632267][T22464] do_recvmmsg+0xbf/0x22c0 [ 1155.769721][T22464] not chained 970000 origins [ 1155.774475][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1155.783148][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.793207][T22464] Call Trace: [ 1155.796511][T22464] dump_stack+0x21c/0x280 [ 1155.800866][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1155.806616][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1155.811846][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1155.817398][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1155.823515][T22464] ? _copy_from_user+0x201/0x310 [ 1155.828495][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1155.833718][T22464] __msan_chain_origin+0x50/0x90 [ 1155.838669][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.843821][T22464] get_compat_msghdr+0x108/0x2b0 [ 1155.848780][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1155.853311][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1155.858536][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1155.864441][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1155.869651][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1155.874948][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1155.879717][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1155.884491][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1155.889199][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.895279][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.901443][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1155.906658][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1155.911520][T22464] do_SYSENTER_32+0x73/0x90 [ 1155.916033][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.922363][T22464] RIP: 0023:0xf7fe8549 [ 1155.926423][T22464] Code: Bad RIP value. [ 1155.930487][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1155.938901][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1155.946880][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.954875][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.962830][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1155.970866][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.978828][T22464] Uninit was stored to memory at: [ 1155.983842][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1155.989542][T22464] __msan_chain_origin+0x50/0x90 [ 1155.994459][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1155.999566][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.004498][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.008986][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.013641][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.019684][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.025813][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.030992][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.035820][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.040316][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.046613][T22464] [ 1156.048924][T22464] Uninit was stored to memory at: [ 1156.053926][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.059622][T22464] __msan_chain_origin+0x50/0x90 [ 1156.064535][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.069735][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.074660][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.079144][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.083806][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.089853][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.095984][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.101161][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.105986][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.110477][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.116772][T22464] [ 1156.119074][T22464] Uninit was stored to memory at: [ 1156.124075][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.129771][T22464] __msan_chain_origin+0x50/0x90 [ 1156.134698][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.139790][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.144705][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.149183][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.153841][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.159911][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.166078][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.171265][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.176146][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.180640][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.186941][T22464] [ 1156.189336][T22464] Uninit was stored to memory at: [ 1156.194341][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.200037][T22464] __msan_chain_origin+0x50/0x90 [ 1156.204953][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.210041][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.214954][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.219432][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.224086][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.230129][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.236258][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.241442][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.246269][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.250752][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.257047][T22464] [ 1156.259350][T22464] Uninit was stored to memory at: [ 1156.264352][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.270048][T22464] __msan_chain_origin+0x50/0x90 [ 1156.274962][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.280051][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.285012][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.289493][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.294150][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.300195][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.306324][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.311499][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.316357][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.320848][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.327144][T22464] [ 1156.329445][T22464] Uninit was stored to memory at: [ 1156.334446][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.340142][T22464] __msan_chain_origin+0x50/0x90 [ 1156.345055][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.350142][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.355071][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.359562][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.364214][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.370258][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.376515][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.381689][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.386516][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.390995][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.397298][T22464] [ 1156.399611][T22464] Uninit was stored to memory at: [ 1156.404615][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.410309][T22464] __msan_chain_origin+0x50/0x90 [ 1156.415225][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.420314][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.425236][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.429715][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.434368][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.440412][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.446558][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.451735][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.456574][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.461055][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.467350][T22464] [ 1156.469661][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1156.476323][T22464] do_recvmmsg+0xbf/0x22c0 [ 1156.480716][T22464] do_recvmmsg+0xbf/0x22c0 [ 1156.619863][T22464] not chained 980000 origins [ 1156.624500][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1156.633202][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.643259][T22464] Call Trace: [ 1156.646568][T22464] dump_stack+0x21c/0x280 [ 1156.650918][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1156.656667][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1156.661876][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1156.667434][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1156.673515][T22464] ? _copy_from_user+0x201/0x310 [ 1156.678463][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1156.683667][T22464] __msan_chain_origin+0x50/0x90 [ 1156.688618][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.693752][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.698727][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.703262][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1156.708470][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1156.714371][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1156.719583][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1156.724877][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1156.729663][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1156.734432][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.739134][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.745216][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.751382][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.756598][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.761462][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.765980][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.772309][T22464] RIP: 0023:0xf7fe8549 [ 1156.776369][T22464] Code: Bad RIP value. [ 1156.780438][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1156.788853][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1156.796804][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.804757][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1156.812726][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1156.820681][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1156.828634][T22464] Uninit was stored to memory at: [ 1156.833660][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.839820][T22464] __msan_chain_origin+0x50/0x90 [ 1156.844734][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.849826][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.854828][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.859311][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.863963][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.870010][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.876139][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.881318][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.886152][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.890631][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.896939][T22464] [ 1156.899245][T22464] Uninit was stored to memory at: [ 1156.904268][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.909965][T22464] __msan_chain_origin+0x50/0x90 [ 1156.914881][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.919969][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.924884][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.929364][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1156.934019][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.940070][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.946200][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1156.951473][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1156.956311][T22464] do_SYSENTER_32+0x73/0x90 [ 1156.960912][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.967214][T22464] [ 1156.969528][T22464] Uninit was stored to memory at: [ 1156.974531][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1156.980228][T22464] __msan_chain_origin+0x50/0x90 [ 1156.985148][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1156.990241][T22464] get_compat_msghdr+0x108/0x2b0 [ 1156.995156][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1156.999666][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.004329][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.010383][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.016532][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.021711][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.026537][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.031020][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.037318][T22464] [ 1157.039622][T22464] Uninit was stored to memory at: [ 1157.044634][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.050329][T22464] __msan_chain_origin+0x50/0x90 [ 1157.055246][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.060352][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.065267][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.069756][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.074433][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.080476][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.086605][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.091778][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.096603][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.101085][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.107381][T22464] [ 1157.109693][T22464] Uninit was stored to memory at: [ 1157.114698][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.120394][T22464] __msan_chain_origin+0x50/0x90 [ 1157.125309][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.130395][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.135331][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.139810][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.144583][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.150648][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.156808][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.161994][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.166822][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.171302][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.177597][T22464] [ 1157.179899][T22464] Uninit was stored to memory at: [ 1157.184904][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.190614][T22464] __msan_chain_origin+0x50/0x90 [ 1157.195538][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.200627][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.205547][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.210024][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.214678][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.220721][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.226850][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.232027][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.236855][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.241334][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.247628][T22464] [ 1157.249957][T22464] Uninit was stored to memory at: [ 1157.254961][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.260677][T22464] __msan_chain_origin+0x50/0x90 [ 1157.265601][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.270689][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.275602][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.280089][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.284745][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.290794][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.296926][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.302103][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.306928][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.311410][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.317725][T22464] [ 1157.320029][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1157.326679][T22464] do_recvmmsg+0xbf/0x22c0 [ 1157.331070][T22464] do_recvmmsg+0xbf/0x22c0 [ 1157.504058][T22464] not chained 990000 origins [ 1157.508783][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1157.517452][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.527511][T22464] Call Trace: [ 1157.530816][T22464] dump_stack+0x21c/0x280 [ 1157.535159][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1157.540914][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1157.546127][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1157.551693][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1157.557807][T22464] ? _copy_from_user+0x201/0x310 [ 1157.562764][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1157.567972][T22464] __msan_chain_origin+0x50/0x90 [ 1157.572918][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.578057][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.583099][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.587629][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1157.592840][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1157.598749][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1157.603958][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1157.609290][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1157.614077][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1157.618874][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.623665][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.629763][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.635931][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.641135][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.645968][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.650453][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.656753][T22464] RIP: 0023:0xf7fe8549 [ 1157.660791][T22464] Code: Bad RIP value. [ 1157.664834][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1157.673222][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1157.681175][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1157.689125][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1157.697074][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1157.705050][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1157.713005][T22464] Uninit was stored to memory at: [ 1157.718013][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.723734][T22464] __msan_chain_origin+0x50/0x90 [ 1157.728652][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.733738][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.738657][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.743182][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.747838][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.753881][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.760011][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.765187][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.770014][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.774517][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.780832][T22464] [ 1157.783140][T22464] Uninit was stored to memory at: [ 1157.788145][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.793837][T22464] __msan_chain_origin+0x50/0x90 [ 1157.798751][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.803837][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.808749][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.813228][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.817883][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.823926][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.830055][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.835230][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.840058][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.844657][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.850971][T22464] [ 1157.853275][T22464] Uninit was stored to memory at: [ 1157.858280][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.863974][T22464] __msan_chain_origin+0x50/0x90 [ 1157.868887][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.873993][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.878908][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.883386][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.888040][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.894081][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.900242][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.905417][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.910245][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.914724][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.921017][T22464] [ 1157.923318][T22464] Uninit was stored to memory at: [ 1157.928320][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1157.934012][T22464] __msan_chain_origin+0x50/0x90 [ 1157.938928][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1157.944016][T22464] get_compat_msghdr+0x108/0x2b0 [ 1157.948939][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1157.953416][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1157.958071][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.964114][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.970246][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1157.975420][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1157.980248][T22464] do_SYSENTER_32+0x73/0x90 [ 1157.984745][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.991042][T22464] [ 1157.993354][T22464] Uninit was stored to memory at: [ 1157.998383][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.004109][T22464] __msan_chain_origin+0x50/0x90 [ 1158.009026][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.014131][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.019046][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.023525][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.028183][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.034241][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.040372][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.045554][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.050382][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.054862][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.061164][T22464] [ 1158.063481][T22464] Uninit was stored to memory at: [ 1158.068487][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.074181][T22464] __msan_chain_origin+0x50/0x90 [ 1158.079096][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.084182][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.089102][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.093581][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.098236][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.104282][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.110414][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.115592][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.120432][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.124912][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.131208][T22464] [ 1158.133511][T22464] Uninit was stored to memory at: [ 1158.138524][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.144219][T22464] __msan_chain_origin+0x50/0x90 [ 1158.149153][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.154244][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.159173][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.163658][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.168332][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.174392][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.180531][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.185710][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.190548][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.195043][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.201361][T22464] [ 1158.203673][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1158.210327][T22464] do_recvmmsg+0xbf/0x22c0 [ 1158.214720][T22464] do_recvmmsg+0xbf/0x22c0 [ 1158.356267][T22464] not chained 1000000 origins [ 1158.360994][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1158.369661][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.379714][T22464] Call Trace: [ 1158.383028][T22464] dump_stack+0x21c/0x280 [ 1158.387389][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1158.393145][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1158.398357][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1158.403913][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1158.409998][T22464] ? _copy_from_user+0x201/0x310 [ 1158.414949][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1158.420157][T22464] __msan_chain_origin+0x50/0x90 [ 1158.425106][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.430244][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.435199][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.439730][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1158.444942][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1158.450848][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1158.456077][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1158.461370][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1158.466137][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1158.470910][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.475606][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.481696][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.487863][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.493076][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.497938][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.502462][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.508788][T22464] RIP: 0023:0xf7fe8549 [ 1158.512853][T22464] Code: Bad RIP value. [ 1158.516921][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1158.525341][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1158.533315][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1158.541385][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.549355][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1158.557415][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.565373][T22464] Uninit was stored to memory at: [ 1158.570406][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.576103][T22464] __msan_chain_origin+0x50/0x90 [ 1158.581105][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.586197][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.591273][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.595759][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.600418][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.606467][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.612599][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.617778][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.622730][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.627211][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.633506][T22464] [ 1158.635807][T22464] Uninit was stored to memory at: [ 1158.640811][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.646507][T22464] __msan_chain_origin+0x50/0x90 [ 1158.651421][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.656507][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.661420][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.665897][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.670596][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.676651][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.682782][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.687961][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.692789][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.697274][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.703575][T22464] [ 1158.705875][T22464] Uninit was stored to memory at: [ 1158.710879][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.716576][T22464] __msan_chain_origin+0x50/0x90 [ 1158.721492][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.726582][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.731522][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.736001][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.740659][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.746710][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.752840][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.758015][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.762842][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.767322][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.773640][T22464] [ 1158.775944][T22464] Uninit was stored to memory at: [ 1158.780945][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.786643][T22464] __msan_chain_origin+0x50/0x90 [ 1158.791562][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.796651][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.801568][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.806049][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.810702][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.816747][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.822897][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.828073][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.832898][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.837394][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.843690][T22464] [ 1158.845995][T22464] Uninit was stored to memory at: [ 1158.851004][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.856697][T22464] __msan_chain_origin+0x50/0x90 [ 1158.861611][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.866705][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.871618][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.876111][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.880766][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.886810][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.892940][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.898118][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.902945][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.907514][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.913810][T22464] [ 1158.916112][T22464] Uninit was stored to memory at: [ 1158.921132][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.926825][T22464] __msan_chain_origin+0x50/0x90 [ 1158.931740][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1158.936859][T22464] get_compat_msghdr+0x108/0x2b0 [ 1158.941772][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1158.946250][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1158.950929][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.956985][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.963312][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1158.968489][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1158.973320][T22464] do_SYSENTER_32+0x73/0x90 [ 1158.977801][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.984145][T22464] [ 1158.986463][T22464] Uninit was stored to memory at: [ 1158.991483][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1158.997371][T22464] __msan_chain_origin+0x50/0x90 [ 1159.002291][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.007380][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.012292][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.016768][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.021421][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.027464][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.033595][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.038768][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.043599][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.048079][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.054373][T22464] [ 1159.056677][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1159.063340][T22464] do_recvmmsg+0xbf/0x22c0 [ 1159.067733][T22464] do_recvmmsg+0xbf/0x22c0 [ 1159.205297][T22464] not chained 1010000 origins [ 1159.210026][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1159.218697][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.228767][T22464] Call Trace: [ 1159.232071][T22464] dump_stack+0x21c/0x280 [ 1159.236416][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1159.242166][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1159.247374][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1159.252932][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1159.259012][T22464] ? _copy_from_user+0x201/0x310 [ 1159.263961][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1159.269168][T22464] __msan_chain_origin+0x50/0x90 [ 1159.274118][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.279255][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.284208][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.288738][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1159.293947][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1159.299854][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1159.305066][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1159.310357][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1159.315135][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1159.319910][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.324613][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.330697][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.336861][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.342071][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.346927][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.351441][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.357773][T22464] RIP: 0023:0xf7fe8549 [ 1159.361849][T22464] Code: Bad RIP value. [ 1159.365913][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1159.374472][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1159.382426][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1159.390375][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1159.398429][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1159.406381][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1159.414362][T22464] Uninit was stored to memory at: [ 1159.419370][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1159.425065][T22464] __msan_chain_origin+0x50/0x90 [ 1159.429980][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.435066][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.439998][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.444478][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.449232][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.455276][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.461410][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.466595][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.471423][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.475902][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.482197][T22464] [ 1159.484499][T22464] Uninit was stored to memory at: [ 1159.489503][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1159.495199][T22464] __msan_chain_origin+0x50/0x90 [ 1159.500115][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.505203][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.510118][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.514601][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.519255][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.525296][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.531427][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.536602][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.541428][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.545908][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.552205][T22464] [ 1159.554514][T22464] Uninit was stored to memory at: [ 1159.559516][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1159.565211][T22464] __msan_chain_origin+0x50/0x90 [ 1159.570131][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.575218][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.580130][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.584619][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.589275][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.595352][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.601503][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.606713][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.611541][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.616022][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.622321][T22464] [ 1159.624626][T22464] Uninit was stored to memory at: [ 1159.629627][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1159.635337][T22464] __msan_chain_origin+0x50/0x90 [ 1159.640253][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.645342][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.650259][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.654766][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.659419][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.665465][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.671597][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.676773][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.681600][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.686094][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.692390][T22464] [ 1159.694694][T22464] Uninit was stored to memory at: [ 1159.699713][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1159.705406][T22464] __msan_chain_origin+0x50/0x90 [ 1159.710320][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.715405][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.720317][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.724796][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.729486][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.735530][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.741698][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.746882][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.751713][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.756193][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.762490][T22464] [ 1159.764793][T22464] Uninit was stored to memory at: [ 1159.769794][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1159.775490][T22464] __msan_chain_origin+0x50/0x90 [ 1159.780404][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.785491][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.790402][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.794896][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.799552][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.805601][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.811730][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.816906][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.821731][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.826212][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.832508][T22464] [ 1159.834809][T22464] Uninit was stored to memory at: [ 1159.839813][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1159.845534][T22464] __msan_chain_origin+0x50/0x90 [ 1159.850456][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1159.855543][T22464] get_compat_msghdr+0x108/0x2b0 [ 1159.860459][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1159.864935][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1159.869590][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.875633][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.881765][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1159.886943][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1159.891770][T22464] do_SYSENTER_32+0x73/0x90 [ 1159.896249][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.902547][T22464] [ 1159.904851][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1159.911500][T22464] do_recvmmsg+0xbf/0x22c0 [ 1159.915899][T22464] do_recvmmsg+0xbf/0x22c0 [ 1160.100709][T22464] not chained 1020000 origins [ 1160.105523][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1160.114193][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.124282][T22464] Call Trace: [ 1160.127590][T22464] dump_stack+0x21c/0x280 [ 1160.131961][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1160.137731][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1160.142947][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1160.148505][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1160.154581][T22464] ? _copy_from_user+0x201/0x310 [ 1160.159539][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1160.164744][T22464] __msan_chain_origin+0x50/0x90 [ 1160.169783][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.174922][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.179881][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.184412][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1160.189628][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1160.195543][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1160.200756][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1160.206052][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1160.210831][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1160.215604][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.220309][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.226398][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.232564][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.237779][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.242645][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.247163][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.253484][T22464] RIP: 0023:0xf7fe8549 [ 1160.257568][T22464] Code: Bad RIP value. [ 1160.261610][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1160.270002][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1160.277957][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.285905][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1160.293911][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1160.301860][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1160.309818][T22464] Uninit was stored to memory at: [ 1160.314825][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1160.320632][T22464] __msan_chain_origin+0x50/0x90 [ 1160.325549][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.330641][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.335557][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.340036][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.344696][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.350742][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.356879][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.362054][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.366881][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.371363][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.377661][T22464] [ 1160.379963][T22464] Uninit was stored to memory at: [ 1160.384968][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1160.390665][T22464] __msan_chain_origin+0x50/0x90 [ 1160.395582][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.400674][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.405591][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.410072][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.414728][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.420771][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.426902][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.432077][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.436905][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.441385][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.447688][T22464] [ 1160.449992][T22464] Uninit was stored to memory at: [ 1160.454993][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1160.460691][T22464] __msan_chain_origin+0x50/0x90 [ 1160.465610][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.470697][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.475615][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.480094][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.484755][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.490797][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.496956][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.502133][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.506963][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.511444][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.517758][T22464] [ 1160.520063][T22464] Uninit was stored to memory at: [ 1160.525083][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1160.530778][T22464] __msan_chain_origin+0x50/0x90 [ 1160.535693][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.540780][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.545700][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.550182][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.554836][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.560878][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.567025][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.572199][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.577030][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.581509][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.587804][T22464] [ 1160.590106][T22464] Uninit was stored to memory at: [ 1160.595109][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1160.600804][T22464] __msan_chain_origin+0x50/0x90 [ 1160.605721][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.610817][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.615741][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.620220][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.624876][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.630924][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.637056][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.642232][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.647078][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.651560][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.657861][T22464] [ 1160.660164][T22464] Uninit was stored to memory at: [ 1160.665168][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1160.670864][T22464] __msan_chain_origin+0x50/0x90 [ 1160.675783][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.680870][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.685781][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.690260][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.695019][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.701065][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.707206][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.712380][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.717207][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.721686][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.727980][T22464] [ 1160.730283][T22464] Uninit was stored to memory at: [ 1160.735300][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1160.741002][T22464] __msan_chain_origin+0x50/0x90 [ 1160.746080][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1160.751167][T22464] get_compat_msghdr+0x108/0x2b0 [ 1160.756082][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1160.760565][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1160.765257][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1160.771302][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1160.777537][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1160.782715][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1160.787541][T22464] do_SYSENTER_32+0x73/0x90 [ 1160.792020][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1160.798314][T22464] [ 1160.800618][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1160.807267][T22464] do_recvmmsg+0xbf/0x22c0 [ 1160.811675][T22464] do_recvmmsg+0xbf/0x22c0 [ 1160.988959][T22464] not chained 1030000 origins [ 1160.993774][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1161.002445][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.012697][T22464] Call Trace: [ 1161.016009][T22464] dump_stack+0x21c/0x280 [ 1161.020357][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1161.026106][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.031315][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1161.036870][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1161.042956][T22464] ? _copy_from_user+0x201/0x310 [ 1161.047913][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.053137][T22464] __msan_chain_origin+0x50/0x90 [ 1161.058099][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.063234][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.068186][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.072717][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.077931][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1161.083835][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.089173][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1161.094472][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1161.099242][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1161.103987][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.108654][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.114704][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.120838][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.126020][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.130850][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.135337][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.141642][T22464] RIP: 0023:0xf7fe8549 [ 1161.145684][T22464] Code: Bad RIP value. [ 1161.149727][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1161.158272][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1161.166271][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.174230][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1161.182188][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1161.190252][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.198211][T22464] Uninit was stored to memory at: [ 1161.203266][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1161.208962][T22464] __msan_chain_origin+0x50/0x90 [ 1161.213874][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.218963][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.224000][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.228529][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.233184][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.239228][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.245364][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.250538][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.255366][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.259847][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.266259][T22464] [ 1161.268574][T22464] Uninit was stored to memory at: [ 1161.273586][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1161.279281][T22464] __msan_chain_origin+0x50/0x90 [ 1161.284197][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.289289][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.294234][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.298736][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.303428][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.309475][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.315608][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.320789][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.325616][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.330097][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.336395][T22464] [ 1161.338703][T22464] Uninit was stored to memory at: [ 1161.343705][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1161.349402][T22464] __msan_chain_origin+0x50/0x90 [ 1161.354323][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.359428][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.364350][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.368832][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.373488][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.379530][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.385661][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.390848][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.395673][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.400154][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.406449][T22464] [ 1161.408761][T22464] Uninit was stored to memory at: [ 1161.413767][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1161.419462][T22464] __msan_chain_origin+0x50/0x90 [ 1161.424378][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.429463][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.434375][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.438854][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.443506][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.449549][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.455680][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.460854][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.465682][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.470271][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.476564][T22464] [ 1161.478877][T22464] Uninit was stored to memory at: [ 1161.483884][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1161.489581][T22464] __msan_chain_origin+0x50/0x90 [ 1161.494498][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.499588][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.504501][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.508990][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.513646][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.519696][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.525827][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.531004][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.535831][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.540314][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.546613][T22464] [ 1161.548936][T22464] Uninit was stored to memory at: [ 1161.553941][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1161.559644][T22464] __msan_chain_origin+0x50/0x90 [ 1161.564558][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.569644][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.574567][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.579047][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.583837][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.589895][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.596029][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.601206][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.606034][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.610530][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.616826][T22464] [ 1161.619129][T22464] Uninit was stored to memory at: [ 1161.624131][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1161.629825][T22464] __msan_chain_origin+0x50/0x90 [ 1161.634741][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.639828][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.644742][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.649222][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.653876][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.659921][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.666053][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.671242][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.676071][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.680571][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.686866][T22464] [ 1161.689184][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1161.695835][T22464] do_recvmmsg+0xbf/0x22c0 [ 1161.700229][T22464] do_recvmmsg+0xbf/0x22c0 [ 1161.843298][T22464] not chained 1040000 origins [ 1161.848028][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1161.856698][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.866800][T22464] Call Trace: [ 1161.870105][T22464] dump_stack+0x21c/0x280 [ 1161.874450][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1161.880200][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.885406][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1161.891069][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1161.897151][T22464] ? _copy_from_user+0x201/0x310 [ 1161.902100][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.907319][T22464] __msan_chain_origin+0x50/0x90 [ 1161.912277][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1161.917417][T22464] get_compat_msghdr+0x108/0x2b0 [ 1161.922378][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1161.926908][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.932119][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1161.938026][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1161.943237][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1161.948640][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1161.953406][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1161.958179][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1161.962877][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1161.968961][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1161.975156][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1161.980379][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1161.985247][T22464] do_SYSENTER_32+0x73/0x90 [ 1161.989769][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1161.996124][T22464] RIP: 0023:0xf7fe8549 [ 1162.000195][T22464] Code: Bad RIP value. [ 1162.004277][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1162.012698][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1162.020682][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.028744][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.036849][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1162.044812][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.052815][T22464] Uninit was stored to memory at: [ 1162.057825][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.063654][T22464] __msan_chain_origin+0x50/0x90 [ 1162.068575][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.073667][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.078585][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.083065][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.087719][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.093763][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.099895][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.105078][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.109907][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.114393][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.120689][T22464] [ 1162.122992][T22464] Uninit was stored to memory at: [ 1162.127997][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.133696][T22464] __msan_chain_origin+0x50/0x90 [ 1162.138630][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.143716][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.148630][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.153246][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.157910][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.163953][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.170175][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.175353][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.180179][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.184660][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.190970][T22464] [ 1162.193277][T22464] Uninit was stored to memory at: [ 1162.198281][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.203975][T22464] __msan_chain_origin+0x50/0x90 [ 1162.208890][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.213976][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.218890][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.223372][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.228032][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.234076][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.240215][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.245398][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.250225][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.254841][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.261246][T22464] [ 1162.263549][T22464] Uninit was stored to memory at: [ 1162.268553][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.274252][T22464] __msan_chain_origin+0x50/0x90 [ 1162.279206][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.284296][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.289211][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.293687][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.298357][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.304412][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.310544][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.315739][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.320590][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.325069][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.331362][T22464] [ 1162.333668][T22464] Uninit was stored to memory at: [ 1162.338668][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.344366][T22464] __msan_chain_origin+0x50/0x90 [ 1162.349292][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.354383][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.359299][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.363779][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.368474][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.374541][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.380673][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.385850][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.390678][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.395157][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.401453][T22464] [ 1162.403756][T22464] Uninit was stored to memory at: [ 1162.408758][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.414455][T22464] __msan_chain_origin+0x50/0x90 [ 1162.419372][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.424460][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.429378][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.433856][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.438510][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.444555][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.450687][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.455952][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.460779][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.465262][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.471559][T22464] [ 1162.473866][T22464] Uninit was stored to memory at: [ 1162.478886][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.484582][T22464] __msan_chain_origin+0x50/0x90 [ 1162.489500][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.494701][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.499613][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.504092][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.508750][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.514797][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.520932][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.526110][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.530938][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.535418][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.541711][T22464] [ 1162.544017][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1162.550665][T22464] do_recvmmsg+0xbf/0x22c0 [ 1162.555056][T22464] do_recvmmsg+0xbf/0x22c0 [ 1162.744704][T22464] not chained 1050000 origins [ 1162.749433][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1162.758106][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.768165][T22464] Call Trace: [ 1162.771468][T22464] dump_stack+0x21c/0x280 [ 1162.775814][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1162.781563][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1162.786772][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1162.792330][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1162.798418][T22464] ? _copy_from_user+0x201/0x310 [ 1162.803369][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1162.808574][T22464] __msan_chain_origin+0x50/0x90 [ 1162.813522][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.818657][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.823612][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.828141][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1162.833355][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1162.839276][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1162.844488][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1162.849789][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1162.854559][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1162.859334][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.864033][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.870126][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1162.876297][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1162.881524][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1162.886389][T22464] do_SYSENTER_32+0x73/0x90 [ 1162.890903][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.897232][T22464] RIP: 0023:0xf7fe8549 [ 1162.901298][T22464] Code: Bad RIP value. [ 1162.905365][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1162.913783][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1162.921759][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.929726][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.937782][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1162.945733][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.953688][T22464] Uninit was stored to memory at: [ 1162.958697][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1162.964440][T22464] __msan_chain_origin+0x50/0x90 [ 1162.969358][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1162.974498][T22464] get_compat_msghdr+0x108/0x2b0 [ 1162.979413][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1162.983899][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1162.988686][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1162.994744][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.000882][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.006057][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.010883][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.015362][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.021656][T22464] [ 1163.023960][T22464] Uninit was stored to memory at: [ 1163.028964][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1163.034705][T22464] __msan_chain_origin+0x50/0x90 [ 1163.039621][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.044709][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.049624][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.054104][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.058759][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.064802][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.070934][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.076108][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.080935][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.085467][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.091766][T22464] [ 1163.094069][T22464] Uninit was stored to memory at: [ 1163.099072][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1163.104766][T22464] __msan_chain_origin+0x50/0x90 [ 1163.109682][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.114769][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.119683][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.124162][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.128818][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.134864][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.140998][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.146191][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.151041][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.155527][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.161823][T22464] [ 1163.164130][T22464] Uninit was stored to memory at: [ 1163.169133][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1163.174828][T22464] __msan_chain_origin+0x50/0x90 [ 1163.179747][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.184855][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.189775][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.194265][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.198921][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.204966][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.211096][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.216276][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.221101][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.225580][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.231877][T22464] [ 1163.234179][T22464] Uninit was stored to memory at: [ 1163.239184][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1163.244882][T22464] __msan_chain_origin+0x50/0x90 [ 1163.249798][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.254887][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.259801][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.264277][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.268944][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.274993][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.281125][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.286303][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.291139][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.295626][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.301922][T22464] [ 1163.304226][T22464] Uninit was stored to memory at: [ 1163.309229][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1163.314924][T22464] __msan_chain_origin+0x50/0x90 [ 1163.319838][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.324926][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.329840][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.334317][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.338974][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.345018][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.351148][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.356325][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.361156][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.365635][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.371932][T22464] [ 1163.374236][T22464] Uninit was stored to memory at: [ 1163.379240][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1163.384966][T22464] __msan_chain_origin+0x50/0x90 [ 1163.389881][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.394969][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.399883][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.404364][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.409022][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.415066][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.421201][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.426388][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.431225][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.435707][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.442006][T22464] [ 1163.444313][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1163.451011][T22464] do_recvmmsg+0xbf/0x22c0 [ 1163.455404][T22464] do_recvmmsg+0xbf/0x22c0 [ 1163.748880][T22464] not chained 1060000 origins [ 1163.753707][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1163.762350][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.772405][T22464] Call Trace: [ 1163.775683][T22464] dump_stack+0x21c/0x280 [ 1163.779996][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1163.785703][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1163.790898][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1163.796424][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1163.802472][T22464] ? _copy_from_user+0x201/0x310 [ 1163.807388][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1163.812565][T22464] __msan_chain_origin+0x50/0x90 [ 1163.817492][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.822587][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.827508][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.831998][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1163.837183][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1163.843059][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1163.848237][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1163.853499][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1163.858239][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1163.862984][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.867647][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.873694][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1163.879830][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1163.885012][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1163.889845][T22464] do_SYSENTER_32+0x73/0x90 [ 1163.894328][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.900630][T22464] RIP: 0023:0xf7fe8549 [ 1163.904682][T22464] Code: Bad RIP value. [ 1163.908738][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1163.917132][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1163.925083][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1163.933032][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1163.940984][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1163.948937][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1163.956894][T22464] Uninit was stored to memory at: [ 1163.961903][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1163.967617][T22464] __msan_chain_origin+0x50/0x90 [ 1163.972550][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1163.977638][T22464] get_compat_msghdr+0x108/0x2b0 [ 1163.982557][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1163.987039][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1163.991698][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1163.997758][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.003903][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.009098][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.013934][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.018421][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.024720][T22464] [ 1164.027023][T22464] Uninit was stored to memory at: [ 1164.032027][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.037724][T22464] __msan_chain_origin+0x50/0x90 [ 1164.042641][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.047730][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.052645][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.057128][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.061782][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.067826][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.073958][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.079135][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.083961][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.088438][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.094734][T22464] [ 1164.097039][T22464] Uninit was stored to memory at: [ 1164.102040][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.107734][T22464] __msan_chain_origin+0x50/0x90 [ 1164.112770][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.117894][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.122827][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.127339][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.131996][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.138039][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.144188][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.149378][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.154213][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.158707][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.165088][T22464] [ 1164.167399][T22464] Uninit was stored to memory at: [ 1164.172406][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.178102][T22464] __msan_chain_origin+0x50/0x90 [ 1164.183023][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.188110][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.193020][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.197498][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.202150][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.208196][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.214326][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.219502][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.224329][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.228808][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.235150][T22464] [ 1164.237452][T22464] Uninit was stored to memory at: [ 1164.242452][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.248146][T22464] __msan_chain_origin+0x50/0x90 [ 1164.253059][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.258148][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.263063][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.267541][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.272193][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.278235][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.284365][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.289543][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.294372][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.298859][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.305152][T22464] [ 1164.307454][T22464] Uninit was stored to memory at: [ 1164.312457][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.318151][T22464] __msan_chain_origin+0x50/0x90 [ 1164.323063][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.328150][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.333062][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.337540][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.342242][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.348287][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.354422][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.359598][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.364449][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.368937][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.375233][T22464] [ 1164.377536][T22464] Uninit was stored to memory at: [ 1164.382544][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.388239][T22464] __msan_chain_origin+0x50/0x90 [ 1164.393155][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.398242][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.403169][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.407647][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.412327][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.418370][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.424501][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.429680][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.434507][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.438986][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.445279][T22464] [ 1164.447585][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1164.454233][T22464] do_recvmmsg+0xbf/0x22c0 [ 1164.458628][T22464] do_recvmmsg+0xbf/0x22c0 [ 1164.651973][T22464] not chained 1070000 origins [ 1164.656705][T22464] CPU: 1 PID: 22464 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1164.665371][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.675424][T22464] Call Trace: [ 1164.678724][T22464] dump_stack+0x21c/0x280 [ 1164.683074][T22464] kmsan_internal_chain_origin+0x6f/0x130 [ 1164.688824][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1164.694031][T22464] ? kmsan_set_origin_checked+0x95/0xf0 [ 1164.699600][T22464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1164.705682][T22464] ? _copy_from_user+0x201/0x310 [ 1164.710631][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1164.715837][T22464] __msan_chain_origin+0x50/0x90 [ 1164.720788][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.725923][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.730877][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.735406][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1164.740611][T22464] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1164.746543][T22464] ? kmsan_get_metadata+0x116/0x180 [ 1164.751748][T22464] ? __msan_poison_alloca+0xf0/0x120 [ 1164.757039][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1164.761812][T22464] ? __sys_recvmmsg+0xbb/0x610 [ 1164.766586][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.771284][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.777367][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.783529][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.788744][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.793588][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.798081][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.804479][T22464] RIP: 0023:0xf7fe8549 [ 1164.808518][T22464] Code: Bad RIP value. [ 1164.812558][T22464] RSP: 002b:00000000f55e20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1164.820970][T22464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1164.828927][T22464] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1164.836874][T22464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1164.844823][T22464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1164.852774][T22464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1164.860730][T22464] Uninit was stored to memory at: [ 1164.865737][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.871434][T22464] __msan_chain_origin+0x50/0x90 [ 1164.876348][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.881433][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.886485][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.891035][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.895702][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.901874][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.908013][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.913311][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.918137][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.922620][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.928922][T22464] [ 1164.931226][T22464] Uninit was stored to memory at: [ 1164.936235][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1164.941932][T22464] __msan_chain_origin+0x50/0x90 [ 1164.946850][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1164.951939][T22464] get_compat_msghdr+0x108/0x2b0 [ 1164.956855][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1164.961334][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1164.966036][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1164.972088][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1164.978341][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1164.983527][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1164.988361][T22464] do_SYSENTER_32+0x73/0x90 [ 1164.992841][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.999137][T22464] [ 1165.001440][T22464] Uninit was stored to memory at: [ 1165.006448][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1165.012271][T22464] __msan_chain_origin+0x50/0x90 [ 1165.017198][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1165.022289][T22464] get_compat_msghdr+0x108/0x2b0 [ 1165.027206][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1165.031684][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1165.036340][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1165.042384][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1165.048519][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1165.053692][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1165.058568][T22464] do_SYSENTER_32+0x73/0x90 [ 1165.063067][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.069363][T22464] [ 1165.071675][T22464] Uninit was stored to memory at: [ 1165.076678][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1165.082372][T22464] __msan_chain_origin+0x50/0x90 [ 1165.087286][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1165.092375][T22464] get_compat_msghdr+0x108/0x2b0 [ 1165.097305][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1165.101783][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1165.106476][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1165.112518][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1165.118651][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1165.123827][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1165.128656][T22464] do_SYSENTER_32+0x73/0x90 [ 1165.133143][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.139436][T22464] [ 1165.141749][T22464] Uninit was stored to memory at: [ 1165.146895][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1165.152607][T22464] __msan_chain_origin+0x50/0x90 [ 1165.157630][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1165.162724][T22464] get_compat_msghdr+0x108/0x2b0 [ 1165.167658][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1165.172145][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1165.176803][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1165.182847][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1165.188984][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1165.194159][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1165.198986][T22464] do_SYSENTER_32+0x73/0x90 [ 1165.203465][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.209761][T22464] [ 1165.212065][T22464] Uninit was stored to memory at: [ 1165.217069][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1165.222765][T22464] __msan_chain_origin+0x50/0x90 [ 1165.227728][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1165.232818][T22464] get_compat_msghdr+0x108/0x2b0 [ 1165.237732][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1165.242212][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1165.246868][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1165.252913][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1165.259046][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1165.264255][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1165.269097][T22464] do_SYSENTER_32+0x73/0x90 [ 1165.273579][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.279874][T22464] [ 1165.282180][T22464] Uninit was stored to memory at: [ 1165.287188][T22464] kmsan_internal_chain_origin+0xad/0x130 [ 1165.292884][T22464] __msan_chain_origin+0x50/0x90 [ 1165.297802][T22464] __get_compat_msghdr+0x6db/0x9d0 [ 1165.302892][T22464] get_compat_msghdr+0x108/0x2b0 [ 1165.307805][T22464] do_recvmmsg+0xdbb/0x22c0 [ 1165.312285][T22464] __sys_recvmmsg+0x5dd/0x610 [ 1165.316938][T22464] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1165.322979][T22464] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1165.329112][T22464] __do_fast_syscall_32+0x2af/0x480 [ 1165.334298][T22464] do_fast_syscall_32+0x6b/0xd0 [ 1165.339148][T22464] do_SYSENTER_32+0x73/0x90 [ 1165.343654][T22464] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.349951][T22464] [ 1165.352256][T22464] Local variable ----msg_sys@do_recvmmsg created at: [ 1165.358906][T22464] do_recvmmsg+0xbf/0x22c0 [ 1165.363298][T22464] do_recvmmsg+0xbf/0x22c0 18:52:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc61, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = gettid() tkill(r5, 0x1000000000016) 18:52:37 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5451, 0x0) 18:52:37 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x9000, 0x0) 18:52:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x14, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x88) 18:52:37 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$LOOP_SET_CAPACITY(r1, 0x5451) 18:52:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x800000000000014) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 18:52:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00eeff870d001700000020000000000a00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) getrandom(&(0x7f0000001ac0)=""/4089, 0xff9, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) 18:52:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) open(&(0x7f0000002840)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/232, 0xe8) 18:52:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r1 = socket$inet(0x10, 0x2, 0x0) dup2(r1, r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x5, 0x0, 0x0) 18:52:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r0, 0x5421, &(0x7f0000000180)) 18:52:38 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x6) syz_open_dev$vcsa(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) tee(r0, r1, 0x2, 0x0) 18:52:38 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 18:52:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x4, 0x0, &(0x7f0000000000)) 18:52:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) memfd_create(&(0x7f0000000340)='$+\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x7) 18:52:39 executing program 5: 18:52:39 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000003340)='/proc/thread-self\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x5450, 0x0) 18:52:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 18:52:39 executing program 1: 18:52:39 executing program 3: 18:52:39 executing program 2: 18:52:39 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 18:52:39 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 18:52:39 executing program 2: 18:52:39 executing program 0: 18:52:39 executing program 5: 18:52:39 executing program 4: 18:52:40 executing program 2: 18:52:40 executing program 0: 18:52:40 executing program 3: 18:52:40 executing program 1: 18:52:40 executing program 5: 18:52:40 executing program 2: 18:52:40 executing program 4: 18:52:40 executing program 0: 18:52:40 executing program 3: 18:52:40 executing program 5: 18:52:40 executing program 0: 18:52:40 executing program 4: 18:52:40 executing program 3: 18:52:40 executing program 2: 18:52:41 executing program 0: 18:52:41 executing program 1: 18:52:41 executing program 4: 18:52:41 executing program 5: 18:52:41 executing program 3: 18:52:41 executing program 2: 18:52:41 executing program 0: 18:52:41 executing program 3: 18:52:41 executing program 2: 18:52:41 executing program 4: 18:52:41 executing program 5: 18:52:42 executing program 0: 18:52:42 executing program 5: 18:52:42 executing program 1: 18:52:42 executing program 2: 18:52:42 executing program 3: 18:52:42 executing program 4: 18:52:42 executing program 0: 18:52:42 executing program 5: 18:52:42 executing program 2: 18:52:42 executing program 0: 18:52:42 executing program 3: 18:52:43 executing program 4: 18:52:43 executing program 5: 18:52:43 executing program 2: 18:52:43 executing program 1: 18:52:43 executing program 0: 18:52:43 executing program 3: 18:52:43 executing program 5: 18:52:43 executing program 4: 18:52:43 executing program 2: 18:52:44 executing program 2: 18:52:44 executing program 3: 18:52:44 executing program 5: 18:52:44 executing program 4: 18:52:44 executing program 0: 18:52:44 executing program 5: 18:52:44 executing program 1: 18:52:44 executing program 2: 18:52:44 executing program 3: 18:52:44 executing program 4: 18:52:44 executing program 0: 18:52:44 executing program 5: 18:52:45 executing program 4: 18:52:45 executing program 0: 18:52:45 executing program 2: 18:52:45 executing program 3: 18:52:45 executing program 5: 18:52:45 executing program 4: 18:52:46 executing program 1: 18:52:46 executing program 0: 18:52:46 executing program 5: 18:52:46 executing program 2: 18:52:46 executing program 3: 18:52:46 executing program 4: 18:52:46 executing program 0: 18:52:46 executing program 3: 18:52:46 executing program 2: 18:52:46 executing program 4: 18:52:46 executing program 5: 18:52:47 executing program 3: 18:52:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) r1 = dup(r0) ioctl$CHAR_RAW_SECTGET(r1, 0x1267, 0x0) 18:52:47 executing program 4: 18:52:47 executing program 5: 18:52:47 executing program 0: 18:52:47 executing program 2: 18:52:47 executing program 3: 18:52:47 executing program 2: 18:52:47 executing program 4: 18:52:47 executing program 0: 18:52:47 executing program 5: 18:52:47 executing program 3: 18:52:48 executing program 5: 18:52:48 executing program 1: 18:52:48 executing program 2: 18:52:48 executing program 4: 18:52:48 executing program 0: 18:52:48 executing program 3: 18:52:48 executing program 5: 18:52:48 executing program 4: 18:52:48 executing program 3: 18:52:48 executing program 2: 18:52:48 executing program 0: 18:52:49 executing program 5: 18:52:49 executing program 4: 18:52:49 executing program 1: 18:52:49 executing program 5: 18:52:49 executing program 2: 18:52:49 executing program 3: 18:52:49 executing program 0: 18:52:49 executing program 4: 18:52:50 executing program 3: 18:52:50 executing program 5: 18:52:50 executing program 0: 18:52:50 executing program 2: 18:52:50 executing program 4: 18:52:50 executing program 0: 18:52:50 executing program 1: 18:52:50 executing program 2: 18:52:50 executing program 5: 18:52:50 executing program 4: 18:52:50 executing program 3: 18:52:50 executing program 0: 18:52:51 executing program 2: 18:52:51 executing program 4: 18:52:51 executing program 5: 18:52:51 executing program 3: 18:52:51 executing program 0: 18:52:51 executing program 5: 18:52:52 executing program 1: 18:52:52 executing program 2: 18:52:52 executing program 0: 18:52:52 executing program 3: 18:52:52 executing program 4: 18:52:52 executing program 5: 18:52:52 executing program 2: 18:52:52 executing program 5: 18:52:52 executing program 4: 18:52:52 executing program 0: 18:52:52 executing program 3: 18:52:52 executing program 5: 18:52:53 executing program 1: 18:52:53 executing program 2: 18:52:53 executing program 0: 18:52:53 executing program 4: 18:52:53 executing program 3: 18:52:53 executing program 5: 18:52:53 executing program 3: 18:52:53 executing program 5: 18:52:53 executing program 0: 18:52:53 executing program 2: 18:52:53 executing program 4: 18:52:54 executing program 5: 18:52:54 executing program 1: 18:52:54 executing program 3: 18:52:54 executing program 2: 18:52:54 executing program 4: 18:52:54 executing program 0: 18:52:54 executing program 5: 18:52:54 executing program 3: 18:52:54 executing program 5: 18:52:54 executing program 2: 18:52:54 executing program 0: 18:52:54 executing program 4: 18:52:55 executing program 3: 18:52:55 executing program 1: 18:52:55 executing program 5: 18:52:55 executing program 2: 18:52:55 executing program 0: 18:52:55 executing program 4: 18:52:55 executing program 3: 18:52:55 executing program 3: 18:52:55 executing program 2: 18:52:55 executing program 5: 18:52:56 executing program 0: 18:52:56 executing program 4: 18:52:56 executing program 2: 18:52:56 executing program 1: 18:52:56 executing program 5: 18:52:56 executing program 3: 18:52:56 executing program 4: 18:52:56 executing program 0: 18:52:56 executing program 2: 18:52:57 executing program 4: 18:52:57 executing program 0: 18:52:57 executing program 3: 18:52:57 executing program 5: 18:52:57 executing program 2: 18:52:57 executing program 3: 18:52:58 executing program 1: 18:52:58 executing program 2: 18:52:58 executing program 5: 18:52:58 executing program 0: 18:52:58 executing program 4: 18:52:58 executing program 3: 18:52:58 executing program 5: 18:52:58 executing program 3: 18:52:58 executing program 0: 18:52:58 executing program 4: 18:52:58 executing program 2: 18:52:58 executing program 2: 18:52:59 executing program 1: 18:52:59 executing program 5: 18:52:59 executing program 0: 18:52:59 executing program 4: 18:52:59 executing program 3: 18:52:59 executing program 2: 18:52:59 executing program 0: 18:52:59 executing program 3: 18:52:59 executing program 4: 18:52:59 executing program 5: 18:52:59 executing program 2: 18:53:00 executing program 0: 18:53:00 executing program 1: 18:53:00 executing program 5: 18:53:00 executing program 3: 18:53:00 executing program 4: 18:53:00 executing program 2: 18:53:00 executing program 0: 18:53:00 executing program 2: 18:53:00 executing program 3: 18:53:00 executing program 4: 18:53:01 executing program 0: 18:53:01 executing program 5: 18:53:01 executing program 2: 18:53:01 executing program 1: 18:53:01 executing program 3: 18:53:01 executing program 5: 18:53:01 executing program 4: 18:53:01 executing program 0: 18:53:01 executing program 2: 18:53:02 executing program 4: 18:53:02 executing program 0: 18:53:02 executing program 5: 18:53:02 executing program 2: 18:53:02 executing program 3: 18:53:02 executing program 2: 18:53:03 executing program 1: 18:53:03 executing program 5: 18:53:03 executing program 3: 18:53:03 executing program 0: 18:53:03 executing program 4: 18:53:03 executing program 2: 18:53:03 executing program 4: 18:53:03 executing program 3: 18:53:03 executing program 5: 18:53:03 executing program 0: 18:53:03 executing program 2: 18:53:03 executing program 4: 18:53:04 executing program 1: 18:53:04 executing program 3: 18:53:04 executing program 5: 18:53:04 executing program 0: 18:53:04 executing program 2: 18:53:04 executing program 4: 18:53:04 executing program 2: 18:53:04 executing program 0: 18:53:04 executing program 3: 18:53:04 executing program 5: 18:53:05 executing program 2: 18:53:05 executing program 5: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x94, &(0x7f0000000180)="c4c691094bca019919d09dceb0ca8a84f7fcb954da07ae2df75511878f43e907000000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b71362838350808ffdb2dc4a741357baa16dacdcfac32957d83d8c0b2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 18:53:05 executing program 1: 18:53:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setresgid(0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:53:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setresgid(0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:53:05 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setresgid(0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:53:05 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x105) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) sched_setattr(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:53:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4091, 0x7ffff000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x1000001bd) 18:53:06 executing program 2: 18:53:06 executing program 1: 18:53:06 executing program 2: 18:53:06 executing program 0: 18:53:06 executing program 3: 18:53:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33}, {0x8, 0x0, 0x94, 0x1f, 0x0, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000}, 0x1, 0x6e6bbb, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1}, 0x0, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2}}, 0xe8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r1, r2) 18:53:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e0300b8a988fdf864752deb7e426f64653d30ef1eaaebb666f11ad5b462303030303030303030303030ff303015031799b7d49b38ab63097265c29a258d972caf03d2998c014a890772b67a9cd252a6716792a0ba71732db33fb8fc24c49c143c72a99c004eddfc193435cf4555d9d41b6e4f60650697685c04ebbf", @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33, 0x0, r1}, {0x8, 0x4, 0x94, 0x0, 0x10000, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000, 0x3ff}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2}}, 0xe8) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r3, r4) 18:53:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)='c', 0x1}], 0x1}}], 0x1, 0x0) 18:53:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33}, {0x8, 0x0, 0x94, 0x1f, 0x0, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000}, 0x1, 0x6e6bbb, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2, 0x7}}, 0xe8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) 18:53:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {0x8, 0x0, 0x94, 0x0, 0x10000, 0x0, 0x0, 0x800}, {0x5, 0x0, 0x80000000, 0x3ff}, 0x1, 0x6e6bbb, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2, 0x7}}, 0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r1, r2) 18:53:07 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000000) 18:53:07 executing program 2: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e0300b8a988fdf864752deb7e426f64653d30ef1eaaebb666f11ad5b462303030303030303030303030ff303015031799b7d49b38ab63097265c29a258d972caf03d2998c014a890772b67a9cd252a6716792a0ba71732db33fb8fc24c49c143c72a99c004eddfc193435cf4555d9d41b6e4f60650697685c04ebbf99409d5c97b63a9f837276eda8442835f2fe2bb00aa6610febe94c3b34957f1695913468", @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYBLOB="ff4aa85a0e231247542d2d71f1bc5d4862f4bb3bebd8a9cb6ab7f49be834ad3cd40048205c5d53d22b53085aab622539b434f30a6d6f2e30441032755fda9b9dd97e03f2fe"]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x4e23, 0x8, 0x4e23, 0x3ff, 0x0, 0x80, 0xe0, 0x33, 0x0, r2}, {0x8, 0x4, 0x94, 0x1f, 0x10000, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x0, 0x3ff}, 0x1, 0x6e6bbb, 0x1, 0x1, 0x2, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x0, 0x1, 0x6, 0x0, 0x22a2, 0x7}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r4, r5) 18:53:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e0300b8a988fdf864752deb7e426f64653d30ef1eaaebb666f11ad5b462303030303030303030303030ff303015031799b7d49b38ab63097265c29a258d972caf03d2998c014a890772b67a9cd252a6716792a0ba71732db33fb8fc24c49c143c72a99c004eddfc193435cf4555d9d41b6e4f60650697685c04ebbf", @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33, 0x0, r1}, {0x8, 0x4, 0x94, 0x0, 0x10000, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000, 0x3ff}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2}}, 0xe8) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r3, r4) 18:53:07 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x3, 0x3, 0x7f, 0x2, 'syz1\x00', 0xffffffff}, 0x6, 0x10000000, 0x9, 0xffffffffffffffff, 0x4, 0x4, 'syz1\x00', &(0x7f0000000180)=['/sys/kernel/debug/binder/transaction_log\x00', ',(\x00', 'GPL\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x59, [], [0x0, 0xff7a, 0x800, 0x5]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000004) 18:53:08 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x3, 0x3, 0x7f, 0x2, 'syz1\x00', 0xffffffff}, 0x6, 0x10000000, 0x9, 0xffffffffffffffff, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xff7a, 0x800, 0x5]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000380)={{0x5, 0x0, 0x2ed2b628, 0x401, 'syz0\x00', 0x1}, 0x3, 0x10000000, 0x8, 0x0, 0x7, 0x8, 'syz0\x00', &(0x7f0000000340)=['^\x00', '/sys/kernel/debug/binder/transaction_log\x00', '\x00', '\\:+!\x9e)\x00', '\x00', ',(\x00', ',(\x00'], 0x3a, [], [0x70f8, 0x0, 0xfbff, 0xdb03]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000004) 18:53:08 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x3, 0x3, 0x7f, 0x2, 'syz1\x00', 0xffffffff}, 0x6, 0x10000000, 0x9, 0xffffffffffffffff, 0x4, 0x4, 'syz1\x00', &(0x7f0000000180)=['/sys/kernel/debug/binder/transaction_log\x00', ',(\x00', 'GPL\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x59, [], [0x0, 0xff7a, 0x800, 0x5]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000380)={{0x5, 0x0, 0x2ed2b628, 0x0, 'syz0\x00', 0x1}, 0x3, 0x10000000, 0x8, 0x0, 0x7, 0x8, 'syz0\x00', &(0x7f0000000340)=['^\x00', '/sys/kernel/debug/binder/transaction_log\x00', '\x00', '\\:+!\x9e)\x00', '\x00', ',(\x00', ',(\x00'], 0x3a, [], [0x70f8, 0x0, 0xfbff, 0xdb03]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000004) 18:53:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e0300b8a988fdf864752deb7e426f64653d30ef1eaaebb666f11ad5b462303030303030303030303030ff303015031799b7d49b38ab63097265c29a258d972caf03d2998c014a890772b67a9cd252a6716792a0ba71732db33fb8fc24c49c143c72a99c004eddfc193435cf4555d9d41b6e4f60650697685c04ebbf", @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33, 0x0, r1}, {0x8, 0x4, 0x94, 0x0, 0x10000, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000, 0x3ff}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2}}, 0xe8) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r3, r4) 18:53:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33}, {0x8, 0x4, 0x94, 0x1f, 0x10000, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000, 0x3ff}, 0x1, 0x6e6bbb, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2, 0x7}}, 0xe8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) 18:53:08 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x3, 0x3, 0x7f, 0x2, 'syz1\x00', 0xffffffff}, 0x6, 0x10000000, 0x9, 0xffffffffffffffff, 0x4, 0x4, 'syz1\x00', &(0x7f0000000180)=['/sys/kernel/debug/binder/transaction_log\x00', ',(\x00', 'GPL\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x59, [], [0x0, 0xff7a, 0x800, 0x5]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c01095000000000000002ba728041598d6fbd30cb599e83d17a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcffd8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a96152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d5a3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddff48fbd72ac0a2be673f934634774fffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a494034bb120000592df1a6c64d8f20a67745409e011f122d70ebbc3b3d34899f40159e800ea2474b54050045f6e664ee46762c2693bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3016e52d337c56abf112874ec309baed0495fca4741fd31da5cc7048ba6866adebab53168770a66ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97affffff7fa0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a465483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06ddfb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357b22515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63b66c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231b1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd47ae636a5dbe9864a117d2732d750a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2b6a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f7e50b652053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b39b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc0264273d82e3c4c67a31f8723bd4a394c6b3e907adc3f86d2fe6f59dd2d2f281ff205a402056fd52bfb794c512bdc06f6f"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000004) 18:53:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33}, {0x8, 0x0, 0x94, 0x0, 0x0, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000}, 0x1, 0x6e6bbb, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2, 0x7}}, 0xe8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) 18:53:08 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x3, 0x3, 0x7f, 0x2, 'syz1\x00', 0xffffffff}, 0x6, 0x10000000, 0x9, 0xffffffffffffffff, 0x4, 0x4, 'syz1\x00', &(0x7f0000000180)=['/sys/kernel/debug/binder/transaction_log\x00', ',(\x00', 'GPL\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x59, [], [0x0, 0xff7a, 0x800, 0x5]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000004) 18:53:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) 18:53:09 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x10800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/1301], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000000) 18:53:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB="2c726f6f746da0e75781ecd0a21c6e0300b8a988fdf864752deb7e426f64653d30ef1eaaebb666f11ad5b462303030303030303030303030ff303015031799b7d49b38ab63097265c29a258d972caf03d2998c014a890772b67a9cd252a6716792a0ba71732db33fb8fc24c49c143c72a99c004eddfc193435cf4555d9d41b6e4f60650697685c04ebbf", @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33, 0x0, r1}, {0x8, 0x4, 0x94, 0x0, 0x10000, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000, 0x3ff}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22a2}}, 0xe8) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r3, r4) 18:53:09 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000380)={{0x5, 0x0, 0x2ed2b628, 0x401, 'syz0\x00', 0x1}, 0x3, 0x10000000, 0x8, 0x0, 0x7, 0x8, 'syz0\x00', &(0x7f0000000340)=['^\x00', '/sys/kernel/debug/binder/transaction_log\x00', '\x00', '\\:+!\x9e)\x00', '\x00', ',(\x00', ',(\x00'], 0x3a, [], [0x70f8, 0x0, 0xfbff, 0xdb03]}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000004) 18:53:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x80, 0x0, 0x33}, {0x8, 0x0, 0x94, 0x0, 0x10000, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000, 0x3ff}, 0x1, 0x6e6bbb, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}}, 0xe8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) 18:53:09 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x3, 0x3, 0x7f, 0x2, 'syz1\x00', 0xffffffff}, 0x6, 0x10000000, 0x9, 0xffffffffffffffff, 0x4, 0x4, 'syz1\x00', &(0x7f0000000180)=['/sys/kernel/debug/binder/transaction_log\x00', ',(\x00', 'GPL\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x59, [], [0x0, 0xff7a, 0x800, 0x5]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c01095000000000000002ba728041598d6fbd30cb599e83d17a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcffd8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a96152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d5a3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddff48fbd72ac0a2be673f934634774fffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a494034bb120000592df1a6c64d8f20a67745409e011f122d70ebbc3b3d34899f40159e800ea2474b54050045f6e664ee46762c2693bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3016e52d337c56abf112874ec309baed0495fca4741fd31da5cc7048ba6866adebab53168770a66ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97affffff7fa0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a465483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06ddfb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357b22515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63b66c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231b1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd47ae636a5dbe9864a117d2732d750a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2b6a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f7e50b652053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b39b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc0264273d82e3c4c67a31f8723bd4a394c6b3e907adc3f86d2fe6f59dd2d2f281ff205a402056fd52bfb794c512bdc06f6f"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x3000004) 18:53:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) geteuid() mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x2000800, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB]) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x33}, {0x8, 0x0, 0x94, 0x0, 0x0, 0x9, 0x0, 0x800}, {0x5, 0x6, 0x80000000, 0x3ff}, 0x0, 0x6e6bbb, 0x0, 0x1, 0x2}, {{@in6=@mcast1}, 0x0, @in6=@private2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}}, 0xe8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r1, r2) 18:53:10 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8050) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 18:53:10 executing program 3: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e1d, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts_2292={{0x14, 0x29, 0x32}}], 0x14}}], 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) 18:53:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x40000002) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r2, r0, 0x0) 18:53:10 executing program 2: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06010100eb0000010bfdff1d000400070001000600f2ff9b000780180001808000000000000000ff0000000000020000001bfff0000465000000000c00090000000000000014aa140017007665746800000000616e0000000080000500070008447d82f6e5e90f767863616e3100000000001b020100000900120000007a32000000000c001b4072dcf77b001980000c00148008200140ee040000000000000004028aab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) splice(r0, 0x0, r2, 0x0, 0x4000000000010001, 0x0) 18:53:11 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x108, 0x0, 0xd0, 0x108, 0xd0, 0x210, 0x228, 0x228, 0x210, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1, [], 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 0x4e23, 0x4e24, 0x4e21, 0x4e20, 0xfffffff7, 0x2, 0x1f, 0x5, 0x1f}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) prctl$PR_SET_TSC(0x1a, 0x6) semget(0x3, 0x1, 0x313) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$ppp(r2, &(0x7f0000000100)="a4", 0x1) fcntl$setsig(r2, 0xa, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000200)="ea082bb504cf374d0a39829886a5cf71314e85999185a18bca3cfa195b0b6a66ad16b1e6edbaa97ef63fe4d1988b6fc3cf80a17b1d0f74744bd15d7fd1c0924a537253d4ad414fd1c2192fc76cb040d01c424e9d24442eb530e5d1da9ce8f1816012988bf8", 0x8}], 0x1000000000000222, 0x9) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000280)=""/246) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGREP(r3, 0x4010744d, &(0x7f0000001000)=""/174) [ 1199.330138][T23050] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1199.447425][T23057] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 18:53:11 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chmod(&(0x7f0000000100)='./file0\x00', 0x0) 18:53:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001800)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0x17) 18:53:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x1d) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendto$inet(r2, 0x0, 0x0, 0x2400873d, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) 18:53:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x0, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 18:53:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @empty}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x3c}, 0x0, @in6=@private2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@private}}, 0xe8) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 18:53:12 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x8, 0x0, {0x0, 0x0, 0x0, 0x14, 0x0, 0xe2dc}}) 18:53:12 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@dev}, {@in=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 18:53:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 18:53:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0xf56, 0x0, {0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) 18:53:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) [ 1200.530698][T23088] rtc_cmos 00:00: Alarms can be up to one day in the future 18:53:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0x40) read$eventfd(r0, &(0x7f0000000080), 0x8) 18:53:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40004007fff, 0x32fe3c70}, 0x14) sendfile(r3, r2, 0x0, 0xedc0) 18:53:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) 18:53:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 18:53:12 executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:53:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf}, 0xffffffc4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lseek(r1, 0x0, 0x3) 18:53:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) [ 1201.280924][T23112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:53:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0) 18:53:13 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="071f080000000000972e00c6fe76cf075768acd251e36def2300020000", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) [ 1201.426655][T23112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:53:13 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x2, 0x4) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 18:53:13 executing program 5: 18:53:13 executing program 4: 18:53:13 executing program 3: 18:53:14 executing program 5: 18:53:14 executing program 0: 18:53:14 executing program 4: 18:53:14 executing program 3: 18:53:14 executing program 5: 18:53:15 executing program 1: 18:53:15 executing program 2: 18:53:15 executing program 0: 18:53:15 executing program 4: 18:53:15 executing program 5: 18:53:15 executing program 3: 18:53:15 executing program 4: 18:53:15 executing program 5: 18:53:15 executing program 0: 18:53:15 executing program 3: 18:53:15 executing program 2: 18:53:15 executing program 4: 18:53:16 executing program 1: 18:53:16 executing program 5: 18:53:16 executing program 2: 18:53:16 executing program 0: 18:53:16 executing program 3: 18:53:16 executing program 4: 18:53:16 executing program 4: 18:53:16 executing program 2: 18:53:16 executing program 0: 18:53:16 executing program 5: 18:53:16 executing program 3: 18:53:17 executing program 2: 18:53:17 executing program 1: 18:53:17 executing program 4: 18:53:17 executing program 3: 18:53:17 executing program 5: 18:53:17 executing program 0: 18:53:17 executing program 2: 18:53:17 executing program 5: 18:53:17 executing program 3: 18:53:17 executing program 4: 18:53:17 executing program 0: 18:53:18 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) 18:53:18 executing program 5: bpf$MAP_UPDATE_ELEM(0x21, 0x0, 0x0) 18:53:18 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8942, &(0x7f0000000080)={'batadv0\x00'}) 18:53:18 executing program 4: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x89e0, 0x0) 18:53:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x7, 0x0, &(0x7f00000000c0)=0x700) 18:53:18 executing program 0: socketpair(0x25, 0x5, 0x0, &(0x7f00000012c0)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x0, 0xea60}) 18:53:18 executing program 5: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vxcan1\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) 18:53:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x74, 0x0, &(0x7f00000000c0)=0x700) 18:53:18 executing program 5: pipe(&(0x7f0000000040)) select(0x40, &(0x7f0000000700)={0x9}, 0x0, 0x0, 0x0) 18:53:18 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x5411, 0x0) 18:53:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4}) 18:53:18 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x5411, 0x0) 18:53:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x18, 0x0, &(0x7f00000000c0)) 18:53:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) [ 1207.541005][T23224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 18:53:19 executing program 1: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3d) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000040)=@buf) 18:53:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000002480)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4ef7c7b726b6e54bcb63d0a6dacb2551f5988f900f698bf3be8c4ee243af10832ad78572dc5d492db62cf8a421b713af0f2fdcd13224e3f7fb48ed572d60a2"}, 0x12, 0x0}], 0x1, 0x0) 18:53:19 executing program 3: r0 = socket(0x22, 0x2, 0x2) sendmsg$rds(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x4004000) 18:53:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x3}}) 18:53:19 executing program 4: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000004a80)={0x91, 0x7d, 0x2, {{0x0, 0x6a, 0x1000, 0x10000, {0x40, 0x4, 0x7}, 0x100000, 0xfff, 0x0, 0x0, 0x12, '/dev/loop-control\x00', 0x1, '}', 0x12, '/dev/loop-control\x00', 0x12, '/dev/loop-control\x00'}, 0x12, '/dev/loop-control\x00'}}, 0x91) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000004d80)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="160436c11e1655bf8c64fba1d92610eba3ccf35cd80f7479a9df74e068f924b4c12e307d63ea8c49dc753b4038eb10ff1d947b", 0x33}, {&(0x7f0000000140)="eb08668c2e2a5ba39f015568ce10d8700abbd95de91cd20e660d73f37a774395abb5d8b0aee7a1ac8dfa5030ee23612fa2195a1fcfac5669ca351e1c4613752c6a4d", 0x42}], 0x2}], 0x1, 0x0) getitimer(0x0, &(0x7f0000004b40)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000004b80)='/dev/loop-control\x00', 0x5870c2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) read$alg(r1, &(0x7f0000000080)=""/137, 0x89) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004900)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="6c952d3ac1863cdff178a4ab61c74a10eecc8ad8d6e7cc193163f40d29b73c90ae6fe79ef24ce241763e1c67035140d41a0b3ba5db9449befa0c4bb201bc5e0730ce7d547ab7152815f5f88b8e81deaa2e47bd91144029f9a8ffd2b6ad808d0384d3974ecf994c30f2c44acf0cb4dc3a9b4d92eba6f687bca3a389c28afe7d97bfcf676dfab971be76b866311d5c358b0ec0c97253834948d9b7eb9c1d7b9d3c17729000fb3a35a3afa69fe52ac622779cca429a96ceadd3315c34fe05a2a420a546592b6c582b93ba4f5374f33d13cd9699a7", 0xd3}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="d4814faf32e70fd834641de436c0422544410655757e1cef3e27b9f0a4b2006b98340908feea06250ec2bc62118d580e4a2dfe7f2656bdca8087d37e61124755c7e376e8f77ed6e8d111ad59e52a7f2967ff80e6d14e17ef2add9d95b293759190effdb416e6b3751c21226769dc620c67023b084f0d3cd6d1d5068b23adb3e3a1b0017a1a081b275d8a3e51dfe7c27fdcc58452c3e21d89c63d98eca226e270", 0xa0}, {&(0x7f0000004bc0)="ac2965fb0310a1e16ad41916a2fd6c86c263729b20d6fdee5d13555ba2ef6b04a3c8ac3a3c4f211066714b3cf0b37ed81988fc89c853bf5e132bb64c0de78225e10e6ceb26c8950d37e5cd18538896d0e19114b5534d20454c1fad4a2ba6a316a2049a143207810f00809e67b955f3df75acec258935f04ac60afe8d16f9f4460193e2c4dc6e7fffdfbfaf00100000b7a0b9dc6792a051499e8564a6540b335d72721f6a57b7f6e2f2a372c24ac7ea87e1bf20997dca1449b4c9df936900026a", 0xc0}, {&(0x7f0000001500)="d5024563a392c2514d445335b280173b0f5dadfc2df3d76fca02e050603a56b0bf89e7dfe6a285790b3add0c48a7f6caf74d7610e91577791399736c9e56d38d21a949060eed971147b7f8307ab7620eb2fd9a21138ab9b5ef23dc73eca40e2f85402f313d6a5f238da58994f10de78f8d77ac272f99acab558184a8130a72119d227fcdbf782f4859c69f3a5dea749fd5d5ce13252ce1d1", 0x98}], 0x5, &(0x7f0000000040)=[@op={0x18}, @op={0x18}], 0x30, 0x80c0}, {0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001640)="0ff910257c4b8d27b160df78fa5c384885baadde6ef6e208879740b1d473b73b90717eda45bee235c5ec2235889ccebe7a0e9460e584f8250130f34c14df557356ce786ef4f62a577ef7d44d556ae9cb0478117b79d937cfd42dce96456aa8e49817c6cc604373da3a07dfc15d199462fcdf6eb509065f23f7b9c14de2f62a13a1059f62f7a88cd07b752c0a94ccd8cc8c5f71926f5b3db0042d724b29736e0d6e7de396cee75a5855f7c046722bb103886eccd6d7518f0dc6769862a33c9940a668739be25f66c71473b23a2b90c8e09a27c55e9cac069d48c3f085e5ffaa84fc820c3be429009b", 0xe8}, {&(0x7f0000001740)="fbb83fc210e18efb10fad23188884129c68e18d7df905c54785147b6ff0c39e89d488a0914ecb2c2bc60b99bae243a293238587064ffd2c7956094d7f07472bd0947", 0x42}, {&(0x7f00000017c0)="09a8c40770159f74497a3f6f55cee9ee6cc53a3b04fc26fdc01562fbce24e0d611be87cd61d36bd644a4800a3d9f31f3c9918e0a70bfdacbb1990a3d154449679489b2c7aa18e32cb6a1998012a6b719c6a33479e96678d14261107944c4e9cd856350664d7f894cf014f3f61fde80a1ab1fc97195d9138748d930b7afcd05305fbbc137cc8168719364546e42a01e89725370ac26388be5be86008041", 0x9d}, {&(0x7f0000000200)="b9b1a251a72a075d920bc0294b14a53f5aaec039cb3b02da2b6a6c3a8cf3ed", 0x1f}], 0x4, &(0x7f00000018c0)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0xb3}], 0x30, 0x4000000}, {0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001900)="559e8f99b195c47823b5c04233476474c30dc0c15da900f8d1a0ac599967cfbe7e4b904a488c1d6c0e8c6eb3a8932857bd76c8f6f3b549c8d883df727b601b061a02d2", 0x43}, {&(0x7f0000001980)="15770cefd022e30419eefb1d37231c7a6676e8b6ae776ffd0052c76262f24bdfb0cc80d9d91364f7858d4ea919d8d7221de16532285b031afde18c790136ad25599938409cfed1445c77", 0x4a}, {&(0x7f0000001a00)="c561486008a9841abc9a424bcca8e7b4176f752257b19e482687227a3f5ba2787225b287d7021b69e00879b2855b829e7fd3e2766c9d802458149af933fb82d2be1554", 0x43}, {&(0x7f0000001a80)="329fcb412f9409eb07089db596adfa015bbf7ada09ebc6b7365a6a7cd109cece52ea92a78a2813f43cb751702595920c299f76b9e43d730b691141d3dc268d58bedc86a1d0f36b120cd0b04642a8aa7dce22b9947d91d05901add34500cbdf7cf01a6ac4a2655ae045b8f2bd82cd20a768df34eacda8d106263cbba64bd41e8cf9a292de44beb49d1f57615655d3d7dae889760dd091d8423cd520fc92c25b6a89829d1ad40d2401972459482df006cfd1f76396071624df4c8f64317c4a396f4afe24cc3317c84e1bacc3cf9fe891fb7316a9c60a0226985a81bf5485ba6bbf", 0xe0}, {&(0x7f0000001b80)="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", 0xfa}], 0x5, &(0x7f0000001d00)=[@assoc={0x18}, @iv={0x60, 0x117, 0x2, 0x4c, "cd9e05523b4598598cf272c0890886ea1c341019be711a24c2b757d46ca459d491d452b1dfa0d621b5b91cd9f18bc3b0f90e143ddcfbdf48ecab88a3b28f454c51ae77bb155273879ea42ce6"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0xa40bdd966ea8bc76}, @iv={0x38, 0x117, 0x2, 0x21, "aed4f2541d369832969a481e4cf5d61eefdcc1940ac8a25b8b276142d2fe6c7eae"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}], 0x1140, 0x4004010}, {0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000002e40)="7e5ef2c949976ad1910c55f44399e0134c00bb9903653cc5b3ca8c2e2e64c5887aa48f17fd7bf89e74989847f17110dc49cdfb38030c3d80425833a390d89dd7a6d0b89cf03eb7f145c57fa1cc6e3de1ec36f4e9685e8b08536d6a55fd286bb15f7080c03808dfc6b04d38660c04e4767df1f72c0055142370ebf6b3aea654cfb7d2d84f07c01904b2627bc4ae718a370bc8347a44a95b9c79daa27ae47202c9159b7e08d7d504212e9a84dd5d12e652ee44b6ea281267e5364f6398de52ca28e93c7907610135", 0xc7}, {&(0x7f0000002f40)="60071ad1b688dc5195645e49034d4c56418a8e9ac86f9f280e0072fc5cae09b6d222b4e9b046864518b1dfa3e48c64c49eeb1b5bf054097d647c00fc0cf528f68c7eaa478dfeb4a6efc0a4a6d8f344b192c11c4670abdf248dc6a1cdfb40892c873a408e4de3a6483ea20140adaacbd10d7141a436203c67d0dc14ecd85c829fa1f70ee6b2a010db4ff1395c9ed6d4b75f172bb6bf68c4331ce4dc3d51876bbfbae7fe83d7e1ee5165aba8c582d01a4067f7e3406fec19", 0xb7}, {&(0x7f0000003000)="80df2bcf5d284979cf0005fa6eb221d3878e8d812cd214bf59114dfe01fcf05773ee3956df74d0067656eec1e85f24952c895ccb4e2fc56e1a08575bb016f1d057d33ca38c23264b57cf664a4f3624d01ed027a3c69a8bfb3ee32e2b138d156ef0c7e7d5f1a95305d6c0b43037e26492b271a80b500202dec52a4eaaafa9549c93b00a502d9bab751bb1ac6e0c4b2a66df2e4a99", 0x94}, {&(0x7f00000030c0)="f886029536bee7ebbcc2245e7f281ccc5d427de7519eb5ad7b8c85bb67d8ec3d14dc2228a4901f4fa569a12779bf5dce10b236fba5e1c3876b571db4cfbc0200b57c57ad31ff03a49889a42d30e32aaba3b10bc90b6880cc1f4a19030452f7ede94cc30b51857d686226a164f668b3875868f41cb9b91522dea0be606d2891ccd9516cd8abcb264e11123f80d347ac73e02d97f23a34f6e659b5fef78cc449cace2ee2074d3169205c9e0b500c188795d273ff7ed44ca842f2266cf6ad8f82", 0xbf}, {&(0x7f00000031c0)="415e3a6cc91b", 0x6}, {&(0x7f0000003200)="0859174c6460b093243778d889caccb6ea3c67b692d6a5d5df60f0ab7c3dee66947daffb95419f90348ac7e5da96ab85538c6815380e509232e5ca3d8a7187534b4a06c672aad569", 0x48}, {&(0x7f0000003280)="0aed877aadb52078e934c41daa0ef1fd8c68afe9a8d12e484d2d8b3d5e48ea6ba38a0523464088676413ddc64981abfd0a5562d7eec3493f619872e175ecc7ea21b6a930f6476ded455a8d30d9322d779aa7b19ac32069a3d44b2fc87524c9fd9f1458208af137ca791ae20dc988dbc0030ce9871a17886db015558aa7c39e97ec00b76d50dbc2970686624c7e31c85106c3f59f9715c92221db6a4d7f7e7912e3ec98bf273cc3d2513b54d6d8fba6d6f7a70dcf3efb0dba1fb901ac1a00b74bbac71d37e49f7b4851a244d5809a9b8e67997129f04c16c5c482e1066b43fa6847072d53e036ec50ec9f2264c6dc8c5a2d302acdcf5671", 0xf7}, {&(0x7f0000003380)="fea8dc8d71c9f8699dff9dc13c12ed9b6354286f7c1aac3b2569de3f679121f585c62089d31b4c3718583e4565df539e5a27e9d3649b181296504eac1fb6b1fd4407914107ad92401349c3ab866d9de0c08eaed32e45d173555ede71d4f3a8ac32796eee0f4fa03e37d1e9698a0bca4d0a8c9685d7fff845f51ca8f549547e48d7e50d7f04326e340bec2bb3a12d9be1f97f364a75aa61f86938397025dc9a0bd85a39687e8c5c57497308f93b6a8617441dd5d8e76d2f9c", 0xb8}, {&(0x7f0000003440)="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", 0x1000}], 0x9, &(0x7f0000004500)=ANY=[@ANYBLOB="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"], 0x108, 0x40400c4}, {0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000004640)="4dccf7788aa3a33d6608777674f0ac434c408ea1e40b79155a13f0981232aa2f5fe598b66947b22dbdfba194155688cadd4c1cf421b78d5a743259d05604d199d6c37d4077c51b13548f17a5d6a7ce38b23265bc7ede1e8db59ccdefca3299443cb273a24caf3f750bf04f4ca0c8c23f6c9c4a22f3c1f0c08322674403ce29635de62dae28264019818f51ddd7acef23cec7dfa4ea7e817094c52b875f4ee084dcbe27d7e12c1b5de09c795322d01c90c110b82eff98549eea0b47453b7fd265352982aea132fffd8634230e0db3e06e96d3242c00afbbc75a4d4ce510e96854e8f5d19cf16f64d411930a05e97bc9b6e34877ed8c68a8", 0xf7}], 0x1, &(0x7f0000004780)=[@iv={0xc0, 0x117, 0x2, 0xa5, "31396f2bfb88bd535d9e54a9208eb2edb0245bf5834880d429026b50a010c5007dc727fa204e16446fca27a151019a7da51a13f47840d73b8a35a605c7d716c69d6fa717ddf477a914798231b8bb25d68578a0f1aa4d27b8397f74ed74aaf910c12064dc465c730ec447452571b11c417a9577ce735a80b667f2c733f18d9af2889f0776305ee9debac3c13566efb18c1e9665a4e518be5a99daaad1f6a80299e78c1d9223"}, @iv={0xb0, 0x117, 0x2, 0x9b, "c2892eb0571fbd42a886fe1f713291bb6ad7f8b7bbf92e973fb926310fc84585af321ac97a0a5a0f7daa4b3e5818f3306bafbaf6dad96d168b20d77917607327e665c95fb0398d7378959251403598d954298aaab5252aec3b8fa8af79c592732aedf3b5c11c749bddf710fe33756af416c0ced9a005ca537078615bdf5ac89c61ede31c70f6be0180e7ba7b6a21d774682b494c73495401f11324"}], 0x170}], 0x5, 0x9) 18:53:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 18:53:19 executing program 2: bpf$MAP_UPDATE_ELEM(0x1e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) 18:53:20 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 18:53:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x10, 0x0, &(0x7f00000000c0)) 18:53:20 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:53:20 executing program 4: r0 = socket(0x2, 0x1000000000002, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 18:53:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_POLL(r1, &(0x7f0000000280)={0x18}, 0x18) write$char_raw(r1, &(0x7f0000000400)=ANY=[], 0xf000) write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18}, 0x18) read$char_raw(r0, &(0x7f000000f400)=ANY=[], 0xfc00) 18:53:21 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x19c}}, 0x24000000) connect$can_j1939(r0, 0x0, 0x0) 18:53:21 executing program 0: socket(0xa, 0x0, 0x7fffffff) 18:53:21 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x70, 0x0, &(0x7f0000000100)) 18:53:21 executing program 5: r0 = socket(0x28, 0x80003, 0xd1b) sendto$l2tp6(r0, 0x0, 0x0, 0xfffffffe, &(0x7f00000010c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x20) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) socket$inet_sctp(0x2, 0x1, 0x84) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0) 18:53:21 executing program 4: r0 = socket(0x2, 0x1, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 18:53:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x24, &(0x7f00000000c0)=[@in={0x2, 0x0, @empty}], 0x10) 18:53:21 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsa\x00', 0x141c02, 0x0) write$cgroup_devices(r0, &(0x7f0000000c80)=ANY=[], 0x20000c88) 18:53:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f00000000c0)) 18:53:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x22, 0x0, &(0x7f00000000c0)=0x300) 18:53:21 executing program 4: r0 = socket(0x2, 0x1, 0x84) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 18:53:21 executing program 5: 18:53:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0xe31d}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) [ 1210.793990][T23298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1210.841831][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:53:22 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xc}, {0x6}]}) 18:53:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 18:53:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f00000000c0)) 18:53:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x7c, 0x0, &(0x7f00000000c0)) 18:53:22 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x4e, 0x0, 0x0) 18:53:22 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x32}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 1211.223902][T23308] EXT4-fs (loop2): Encoding requested by superblock is unknown 18:53:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$nfc_llcp(r0, 0x10e, 0xa, 0x0, 0x400600) 18:53:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x80086301, 0x0) 18:53:23 executing program 5: r0 = socket(0xa, 0x3, 0x3d) r1 = socket(0x28, 0x4, 0x6) connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x10) sendmmsg$nfc_llcp(r1, &(0x7f0000003340)=[{&(0x7f0000000040)={0x27, 0x0, 0x2, 0x1, 0x4, 0x5, "e669df4c20e1c3bcc5d692a9370d00b1d48e4c47651a0d1b68f84ec5d5dbfcb5d267248393ab375b50ead03c2fbfddf2d32ebd22636044f389624b68be3401", 0xe}, 0x60, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20040000}, {&(0x7f0000000100)={0x27, 0x0, 0x1, 0x4, 0x4d, 0x2, "9ef190b7e7d179a8ecfbe4a1e1aedeb13709b17b3c62ba78015629722ca7a5cf7ffa37d483dc99e45468fd1fdc52e6428d88e32355d3083f9b929e3f8e64ee", 0x3f}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000180)="bd689eb167973cbd2615bb9b78e1514aca22d52164c33ae7d9ba8b2604a520c5d016d2d3dbb2c461e5002844d47f03f372b64000f88fb2fb155e1989922d6aa1633bf3f82e9d87676976dec02255d3d38432eff915cfd21398d3b2d2dbf0bb68592a91b1e7b929c3bb1885fdfa70c45aa6b4", 0x72}, {&(0x7f0000000200)="14b23c594a51824dc41ee222b995ef7ee60807ec47a3a0044fa7b1ed79322d86d604e83e13e36ffabe963243e730b86876e4e76109eaff2f371dd4983fe5f7ada2541f344a83c1fbe62e8bebd625dd663963023e6cfd02b2a0ce98913acf00a6b52c003298a7e8c6692b12e70f3c952671019b20361bc53b4d96e8e7f91b433371d30987b1174353e97e7343b09e2cad83314519c1f76f205f1042f709b87a055865bff9faea4f58410aade3240b342b2179f2bc045cf3ab4b0d7977d88561", 0xbf}], 0x2, &(0x7f0000000400)={0x108, 0x105, 0x3, "8108a52afa47173946cd4254d0c961cb51420367ad7ac7a448133577fcb1aacb93835b4c63695df317bff9100ba0a4050812238139c0776a59513ee10bd77738d345c0dca2bd41fa989372d16c8d1acdc5530e4992c9bfd0bd1b7dfb6f6ac0902f95d375914ddfafcec0da2becf03cbdc278a2e5fda5090486b281d9d802b9a8f8893daa2ded648ad4bb36b3a8ecb00bc1dd4477178d8f5748231f99ea3160757593347510baadb0099dc17c213bdbc0f6835a5705d1342ed1298ba50c388a654e90bd646a02bfc2aef254c240bf20a940c22c8195c77971fb4079cb6eb252b2a4056bffa5558ba159c4f1cb27605fba650d4487ecabfc"}, 0x108, 0x1}, {&(0x7f0000000300)={0x27, 0x0, 0x1, 0x5, 0x1f, 0x1f, "cb4db9553ccdc77d9e6e3620ad48698538ec3efd037d56e40501a1d67d4e1e91f3eb7ea8826f126b3102e347430c3320babae945a5f0bf0ac7db22e15d2a9d", 0x18}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000540)="65acc9309f8693a5f0e5818d552257ef5b87d3779fbcfabb4e98776f46b21934072ad90bdd659566e33848b3485f56a172c642e1b5cb2d19912ddd09185c71c498af39d4de50b97ac0b7a425af77391bb8efcd10ba30f80eb042b5c92067a96ebdc56092225b", 0x66}], 0x1, &(0x7f00000005c0)={0x70, 0x1, 0x0, "c2a9a4de56c28f47cb776d9bc58ca766941187b30e597bfe997e1790735c1395995baabbab2f7b2b241c4af94e71853ef658c7193e660198ad4105a0e11a47222d00b94182bff76a18d87e300b8a91467798c7ceb4a54dde02"}, 0x70, 0x4040}, {&(0x7f0000000640)={0x27, 0x1, 0x2, 0x5, 0x4, 0x2, "7aedfd0eb90e06bc114cca43cf5b25cfe585d81008ea0e9528d59d62b26595417d24a6d93c402b98ad020803c71599c148acc5b5827633338f9459531203f3", 0x16}, 0x60, &(0x7f0000000900)=[{&(0x7f00000006c0)="479246111e275f8d433e50208cbd482700529b653c2193588a64c1cf8c763d395a892354813ea26b70a7e9bceaa10739805ff60ecb33", 0x36}, {&(0x7f0000000700)="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", 0xfb}, {&(0x7f0000000800)="76e20f63e478383a7fa8c6121043d35e1d85d979d075ef15038235bde58884e5eb252e27c1efd0f8142c949df9ede025ce1a0661ec3d4f86f5230768bd047d92fb4ddc6f61f1f65333d509f031bb76d6800bb4146b7f2b908f3a1cb19e2d3badd83240d7c52e247c2e7444b3426064137867bff5ce81a96da4d93a19651623a8d217e945d90644414364b4b3c38d6c6fbd94b75944e3d2b7bdbd1a59f7183450483a56d32f12f1a7c19fd0399ce022bf12cb06fd017afe69359c1ad2d0ee182fbb2fba90f461", 0xc6}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000000940)={0x27, 0x1, 0x0, 0x6, 0x81, 0x1, "409416a308a267afafddb59dc02963212a49c67536c56916ed227f64c28ec5443c8c898b2b6586971708cd93d3bac90524106ffbc8fc44f934a2265d95c847", 0x7}, 0x60, &(0x7f0000000c80)=[{&(0x7f00000009c0)="67c8fada1b8039af33dbd6ee627a88e17e465ce9fca6e902a336995902f830d493cc17bc64ffefd29446c320493bfa7dedc903c3bed57f2633c61716906547f86ffb6cfcb8f6a93a8a9982849dd2a7c6955d23de074460c9117fcc8cea845029cceb016cd5ade401762e3d932b8b967bec94e7734a2ebdec41aac2686476ee7dd91da5f648c477f7548b2e2b7185598cbf8dd4e2e227d36e455d91580a808eca5d622b1e15cdb1545cf9c6c859699827f5d3541c1f7feb9d5f4391eb93cd0328fedd7e158ddbc755d15578193be374c15bd025323ca4b32819137f00268ad1244343a4f96ef1c0b5f963580f367d9a45336ad90019f397f3de", 0xf9}, {&(0x7f0000000ac0)="835eab7f858539f56dd8e0aca6cb9103937e966ef7f2b0c67be9dec2d91e304b6bbe394f912ac1a0c6c21ccb12061a12923c78d89aa5dc5a90c31c74ac0d1638105f3e7cb3abaf8b47a3c0a5545b8806e6897a748d0df559dcdec5c341eb85bfd324c7cbcefd1b285c9a40aea581e1", 0x6f}, {&(0x7f0000000b40)="b72633bd1cbde3ac2defb58b99bdbfbb1ad1989d3314aef806f02d186ff08de1a563c18c60055a5b3ddeb64a5ab0d4de2a33c7d8f3ea068bf9ea588b3697", 0x3e}, {&(0x7f0000000b80)="f27e1025b88b848b460bb53daa9b102655414fcb6c5170c726f43373a4dd3a8ea3f837795e374ced925ccf57f318a51910db2da1134a6b5fe3e3a908e046872ebf337a27ab6fd20eb3fff09cb12b49ba599c645c3eb11ac02d31cf6f89ab5953f6a80a9a7a8a847be94e0e7b40e1481c56975a13da0f425e148842351d6eea23fcde566efe2c4f4e4730989e321a60cf4b9363aa016affbfe571f0064bdb37bcd445fa88bc735acde91ca30f073edd82e13c87e710da168ef99f18dae83a5b0645122a", 0xc3}], 0x4, &(0x7f0000000cc0)={0x18, 0x116, 0x3, "9a9c61f1e92e1e"}, 0x18, 0x404c850}, {&(0x7f0000000d00)={0x27, 0x1, 0x2, 0x2, 0x6, 0xec, "159b0f5c09d0b69bd81bccb867c09d2dc222af44421e8bfac9797232d89eb010843a1ddaa54175021260d4518b215f993d7921266aacc6b8f51bc371b02cf0", 0x35}, 0x60, &(0x7f0000002040)=[{&(0x7f0000000d80)="52d3261f285651da4d3ec628b62355097727bc8c507ec36b782808435ca83f0e66408350ddefed0447ab88a7d5afb5a603b66d64c4f502f39dfed76089a986b6415a7ef0f594530674b4ada6a286d44c79d4ed4d63f9b8d86718cf6345a774ab9870d3caaddaeb10afeaff516d202d8cadefd0a50a44d9482ad04cb1bc423735ec", 0x81}, {&(0x7f0000000e40)="a894a9d372963e4b1589d0496722548865f7c1c7d8b3fef8a11d494773bcac1313956e15fa8b4b", 0x27}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="c81016633ae6ff90f26315e81c91d81f96fa6e607dc95fe2dc26e54f", 0x1c}, {&(0x7f0000001ec0)="e071a9aa7c24d7ea03d82e0b22835002f274fbae9387d0eca61d2a5eb8ff702dd85e1d9628382bfbd689a88ebbab8d2fc6256f6da9703c9c19e834c216e32bb1d2eb2dcb8282df93eb0455961844eb4200914b8f699db9bff0708b812422a77cca61aad8f589e0fb65e1ffe6a070b2317eb09e18f91df3cdea73e9ac70d3b991f24b322bed351d33aa8fe939e11b3a96e9a685da29ad4dc9e05c8721acd47b8044f802b754af04ca11ee1591977ad067ae4821635ecc14a7b35338491ac11a1c128ca2e438b218a8a443359c82e225", 0xcf}, {&(0x7f0000001fc0)="3fc5693c8475fc5786388bd5380d63116bd350382be9f83e0bf8b28352eb692e87b00bd352c1358bb4c9a58b0398c81a8f39903c331bf154a11c3f62a7289e7fc1f7b5979eccc58d379b0a31321cc70c08e1c77796b0cd3ee4d1ac857f957ab3260c2eedfcef", 0x66}], 0x6, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000000000000c01000004000000a340e48764462098"], 0x18, 0x40000}, {&(0x7f0000002100)={0x27, 0x1, 0x0, 0x4, 0x6, 0x3f, "761dcdeb419c3416dbcba9a543201dacdeb83b0ae64edaaa2fd3c63336c3c1b8b63ea3e8b457615c582e6d11add9680020cd5203da425ade734c1c52ea76ef", 0x2d}, 0x60, &(0x7f0000003240)=[{&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="a8e80bed0bc1feb3614fc14a2b5f446a6398c967ed6886f5c56a73d4f2279e3138ac51ae442e46b698f8f47ae62725843504dbdbdb4fb130d435f4f2d1e741383f8965e4eef1d039a1c9eeb76507f390ff9b4177a5daa82aab149c13c56fbc84ca5cea348e", 0x65}, {&(0x7f0000003200)="cf78d27b301ef112978616d0fb1daf74f8cb2d2bfc0f971858b0448617109a59fb341370bbfdc7eb65b979d8f9984dc6c9df5f", 0x33}], 0x3, &(0x7f0000003280)={0xa8, 0x3a, 0x7fffffff, "14da1df7347830e879052006151a95ae0e990863b73a8c69a10606e1465fa9bd31ba0fb8dba7ab032782c45452782ca20d84aef13e498de00fb88e927eb83a4301c19933147a97f21ffeb0447a985992f161bdb3c9bc5069c855e1cf8e3481e18c0c24e253fbcb31261a8c626d9d72f8f13edcef83b717847c361e4360a6571c4602c2400134205f1de866daa9c3524953cd8be7939e62"}, 0xa8, 0x2004c040}], 0x7, 0x20) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000003500)={0x9, [0x8d8, 0x8000], 0x506}, 0x10) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000003640)=0xb2, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f00000003c0)=@buf={0xc0fe}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003540)='/dev/nullb0\x00', 0x2400, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000003580)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/nullb0\x00', 0x40000, 0x0) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000003600)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) 18:53:23 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:53:23 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)={0x8, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000300)="e1", &(0x7f00000000c0)}, 0x20) 18:53:23 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0) 18:53:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8982, 0x0) 18:53:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x11, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 18:53:24 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10f, 0x85, 0x0, 0x0) 18:53:24 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a1, &(0x7f0000000080)={'batadv0\x00'}) 18:53:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0xfffffe10) 18:53:24 executing program 4: waitid(0xce4cb25a00000003, 0xffffffffffffffff, 0x0, 0x8, 0x0) 18:53:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) 18:53:25 executing program 4: r0 = socket(0x11, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) 18:53:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0xd, 0x0, &(0x7f00000000c0)) 18:53:25 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x18, 0x0, &(0x7f0000000100)=0x8300) 18:53:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/16) 18:53:25 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, 0x0) 18:53:25 executing program 1: setresuid(0x0, 0xee01, 0xffffffffffffffff) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000080)) 18:53:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f00000000c0)) 18:53:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}]}]}, 0x30}}, 0x0) 18:53:25 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, @private0}, 0x20) 18:53:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000140)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x7}}, 0x4c}}, 0x0) 18:53:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000002010500000000000000a335b1c3"], 0x18}}, 0x0) [ 1214.217213][T23376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 18:53:26 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) [ 1214.350630][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:53:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4, 0x2}]}, 0x18}}, 0x0) 18:53:26 executing program 0: r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 18:53:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4068aea3, &(0x7f00000020c0)) 18:53:26 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'sit0\x00'}) 18:53:26 executing program 3: set_thread_area(0x0) 18:53:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 18:53:27 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@can={0x1d, r1}, 0x80, 0x0}, 0x0) 18:53:27 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1, 0x0, 0x0, 0x4) 18:53:27 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000000)) 18:53:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x33, 0x0, 0x0) 18:53:27 executing program 5: r0 = syz_init_net_socket$rose(0xffffffff00000003, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000380)=@default) 18:53:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) 18:53:27 executing program 0: r0 = getpgid(0x0) sched_setparam(r0, &(0x7f0000000080)=0x8001) 18:53:27 executing program 4: r0 = socket(0x2, 0x1, 0x84) recvmsg$can_j1939(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 18:53:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x18) 18:53:27 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x7) 18:53:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x26}, 0x0) 18:53:28 executing program 1: bpf$MAP_UPDATE_ELEM(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) 18:53:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000003300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x4020940d, 0x0) 18:53:28 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$bt_hci(r0, 0x0, 0xeffd) 18:53:28 executing program 2: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01"], 0x1c}}, 0x0) 18:53:28 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x5411, 0x0) 18:53:28 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0xc0045878, 0x0) 18:53:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x72, 0x0, &(0x7f00000000c0)) 18:53:28 executing program 2: r0 = socket(0x22, 0x2, 0x2) sendmsg$rds(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) 18:53:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) 18:53:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000201010800000000000051cae3a10006080015"], 0x1c}}, 0x0) 18:53:28 executing program 3: bpf$MAP_CREATE(0x14, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x2c) 18:53:29 executing program 5: io_submit(0x0, 0x0, 0x0) 18:53:29 executing program 1: r0 = socket(0x2a, 0x2, 0x0) bind$can_j1939(r0, &(0x7f0000000000), 0x18) 18:53:29 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0xfffffffe, &(0x7f00000010c0)={0xa, 0x0, 0x0, @dev}, 0x20) 18:53:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 18:53:29 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x8300) 18:53:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000003300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40104593, 0x0) 18:53:29 executing program 5: r0 = socket(0x2b, 0x1, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000a40)={0x0, 0xfffffe6a, 0x0, 0x0, 0x0, 0xfffffffffffffd43}, 0x0) 18:53:30 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 18:53:30 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)) 18:53:30 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890c, 0x0) 18:53:30 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89f1, 0x0) 18:53:30 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x811) 18:53:30 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1}) 18:53:31 executing program 1: r0 = fsopen(&(0x7f0000000100)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 18:53:31 executing program 5: bpf$PROG_LOAD(0x1d, 0x0, 0x0) 18:53:31 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x11, 0x0, &(0x7f0000000100)) 18:53:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)='A', 0x1, 0x20044011, 0x0, 0x0) 18:53:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x10, 0x0, &(0x7f00000000c0)=0x8) [ 1219.409708][ T29] audit: type=1326 audit(1598986411.263:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23485 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fe8549 code=0x0 [ 1219.568391][T23499] sctp: [Deprecated]: syz-executor.3 (pid 23499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1219.568391][T23499] Use struct sctp_sack_info instead [ 1219.696576][ T29] audit: type=1326 audit(1598986411.553:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23485 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fe8549 code=0x0 18:53:31 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x4004810, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x20) 18:53:31 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0xe0e01, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) 18:53:31 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5423, 0x0) 18:53:31 executing program 3: request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) 18:53:31 executing program 2: r0 = socket(0xa, 0x2, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40002022, 0x0, 0x0) 18:53:32 executing program 5: r0 = socket(0x15, 0x805, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1b) 18:53:32 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) 18:53:32 executing program 1: r0 = socket(0xa, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 18:53:32 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18:53:32 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0x0) 18:53:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) 18:53:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 18:53:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x14, r1, 0x7e8e8a2ac8388745, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 1221.143322][T23528] (syz-executor.4,23528,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1221.154503][T23528] (syz-executor.4,23528,0):ocfs2_fill_super:1190 ERROR: status = -22 18:53:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) 18:53:33 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80044df9, 0x0) [ 1221.393196][T23534] (syz-executor.4,23534,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1221.403548][T23534] (syz-executor.4,23534,0):ocfs2_fill_super:1190 ERROR: status = -22 18:53:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18:53:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x406855c9, 0x0) 18:53:33 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18:53:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x13, 0x0, &(0x7f00000000c0)=0x700) [ 1222.018931][T23551] (syz-executor.4,23551,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1222.029666][T23551] (syz-executor.4,23551,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f00000000c0)) 18:53:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x6f, 0x0, &(0x7f00000000c0)) 18:53:34 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000300)={{0xa, @default, 0x20003}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 18:53:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)) 18:53:34 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18:53:34 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) [ 1222.655159][T23567] (syz-executor.4,23567,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1222.665462][T23567] (syz-executor.4,23567,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 18:53:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x10, 0x1}, 0x18}}, 0x0) 18:53:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "d29a2b50126169c922442a84a4ef4f270b9992dba21d22eae2b1806f2684672451180649d7a3df06b493e8bacb27e65664cff52f99c549b3548a5a8f0a649b46"}, 0x4b) 18:53:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 18:53:34 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18:53:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 1223.253051][T23582] (syz-executor.4,23582,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1223.263365][T23582] (syz-executor.4,23582,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)='$', 0x1, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 18:53:35 executing program 0: r0 = socket(0x23, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 18:53:35 executing program 2: io_setup(0x0, &(0x7f0000000040)) 18:53:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20000000) 18:53:35 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xf0}, 0x0) 18:53:35 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:53:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f00000000c0)={0x0, 0x68}}, 0x0) 18:53:35 executing program 0: bpf$MAP_CREATE(0x7, &(0x7f0000000600), 0x40) 18:53:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x2, 0x0, &(0x7f00000000c0)) 18:53:35 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10f, 0x7, 0x0, 0x0) [ 1223.966267][T23600] (syz-executor.4,23600,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1223.976619][T23600] (syz-executor.4,23600,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:35 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000003000/0x4000)=nil) 18:53:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x9, 0x0, 0x0) 18:53:36 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:36 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0xf, 0x0, &(0x7f0000000100)) 18:53:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x9, 0x0, &(0x7f00000000c0)) 18:53:36 executing program 3: r0 = socket(0x23, 0x2, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x140, 0x0, 0x0) 18:53:36 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) [ 1224.740487][T23618] (syz-executor.4,23618,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1224.750889][T23618] (syz-executor.4,23618,0):ocfs2_fill_super:1190 ERROR: status = -22 18:53:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 18:53:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {0x3, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}]}, 0x30}}, 0x0) 18:53:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7ffff000}}, 0x0) 18:53:36 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:37 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 18:53:37 executing program 1: r0 = socket(0x23, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891d, &(0x7f00000000c0)={'vxcan0\x00'}) 18:53:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x5451, 0x0) [ 1225.433784][T23643] tipc: Enabled bearer , priority 10 [ 1225.500282][T23644] (syz-executor.4,23644,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1225.510505][T23644] (syz-executor.4,23644,0):ocfs2_fill_super:1190 ERROR: status = -22 18:53:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x300}, 0x0) 18:53:37 executing program 5: r0 = socket(0xa, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) listen(r0, 0x0) 18:53:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="efff"], 0x30}}, 0x0) 18:53:37 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) 18:53:38 executing program 2: r0 = socket(0x25, 0x1, 0x1) connect$can_j1939(r0, &(0x7f0000000000)={0x25}, 0x18) 18:53:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 18:53:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0xc020660b, 0x0) 18:53:38 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsa\x00', 0x141c02, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x8) write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'rwm\x00'}, 0xa) [ 1226.494583][T23666] (syz-executor.4,23666,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1226.504873][T23666] (syz-executor.4,23666,0):ocfs2_fill_super:1190 ERROR: status = -22 18:53:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x3, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) [ 1226.904269][T23680] tipc: Enabling of bearer rejected, failed to enable media [ 1226.993260][T23683] tipc: Enabling of bearer rejected, failed to enable media 18:53:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 18:53:39 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001000000200003"], 0x34}}, 0x0) 18:53:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0xd, 0x0, &(0x7f00000000c0)=0x700) 18:53:39 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 18:53:39 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsa\x00', 0x141c02, 0x0) write$cgroup_devices(r0, 0x0, 0x8) [ 1227.405651][T23696] (syz-executor.4,23696,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1227.416197][T23696] (syz-executor.4,23696,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:39 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x8300) 18:53:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f00000000c0)) 18:53:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000140)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 18:53:39 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 18:53:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') [ 1227.937835][T23706] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:53:39 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 1228.117125][T23709] (syz-executor.4,23709,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1228.127430][T23709] (syz-executor.4,23709,0):ocfs2_fill_super:1190 ERROR: status = -22 18:53:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 18:53:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000100)=[@in6={0x2, 0x0, 0x1000000, @dev}], 0x1c) 18:53:40 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x1}], 0x10}, 0x0) 18:53:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x3, 0x0, 0x0) 18:53:40 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x23, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) 18:53:40 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18:53:40 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000880)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 1228.701522][T23726] (syz-executor.4,23726,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1228.711760][T23726] (syz-executor.4,23726,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:40 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x10e, 0x4, 0x0, 0x0) [ 1229.304687][T23738] (syz-executor.4,23738,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1229.315114][T23738] (syz-executor.4,23738,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:41 executing program 0: r0 = socket(0x11, 0x3, 0x0) connect$can_j1939(r0, 0x0, 0x0) 18:53:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x21, 0x0, &(0x7f00000000c0)) 18:53:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) 18:53:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x2000}, 0x4) 18:53:41 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x15, 0x1}, 0x18}}, 0x0) 18:53:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x100000000001, 0x68001) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000001c0)) 18:53:41 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) [ 1230.167933][T23758] (syz-executor.4,23758,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1230.178284][T23758] (syz-executor.4,23758,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 18:53:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 18:53:42 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 18:53:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c}}) 18:53:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:42 executing program 5: sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsa\x00', 0x141c02, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$cgroup_devices(r0, &(0x7f0000000c80)=ANY=[], 0x7ffff) [ 1230.883121][T23775] (syz-executor.4,23775,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1230.893393][T23775] (syz-executor.4,23775,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:42 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 18:53:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 18:53:42 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000100)) 18:53:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r0, 0x0, 0x6, 0x0, &(0x7f00000000c0)) 18:53:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet6_int(r0, 0x84, 0x0, 0x0, 0x0) 18:53:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x14, 0x0, &(0x7f00000000c0)) 18:53:43 executing program 3: io_setup(0xa6, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000000)) 18:53:43 executing program 0: bpf$MAP_UPDATE_ELEM(0xe, 0x0, 0x0) 18:53:43 executing program 5: perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1231.550957][T23797] (syz-executor.4,23797,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1231.561455][T23797] (syz-executor.4,23797,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:43 executing program 3: r0 = fsopen(&(0x7f0000000080)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) 18:53:43 executing program 2: r0 = syz_init_net_socket$rose(0xffffffff00000003, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e8, 0x0) 18:53:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='z', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 18:53:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:44 executing program 5: r0 = fsopen(&(0x7f0000000140)='ceph\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='/dev/hidraw#\x00', 0x0, r2) 18:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) 18:53:44 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 18:53:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae99, &(0x7f00000020c0)) [ 1232.530109][T23819] (syz-executor.4,23819,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1232.540385][T23819] (syz-executor.4,23819,1):ocfs2_fill_super:1190 ERROR: status = -22 [ 1232.597941][T23825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:53:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, 0x0) [ 1232.744413][T23835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:53:44 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x2002) 18:53:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 18:53:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x12, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) 18:53:45 executing program 3: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 1233.273325][T23847] (syz-executor.4,23847,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1233.283950][T23847] (syz-executor.4,23847,1):ocfs2_fill_super:1190 ERROR: status = -22 [ 1233.363152][T23851] netlink: 'syz-executor.0': attribute type 18 has an invalid length. 18:53:45 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8911, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:53:45 executing program 5: r0 = socket(0x23, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8911, &(0x7f00000000c0)={'vxcan0\x00'}) 18:53:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0xf, 0x0, &(0x7f00000000c0)=0x700) 18:53:45 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000200)='cifs.idmap\x00', 0x0, 0x0) 18:53:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x50}, 0x48) write$binfmt_misc(r0, 0x0, 0x0) [ 1233.878966][T23862] (syz-executor.4,23862,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1233.889209][T23862] (syz-executor.4,23862,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 18:53:46 executing program 2: r0 = socket(0x15, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 18:53:46 executing program 5: r0 = socket(0x1e, 0x805, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @loopback}, 0xf) 18:53:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:46 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x13, 0x0, &(0x7f0000000100)) 18:53:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003080)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000002fc0)="8508a6940068", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1234.662484][T23883] (syz-executor.4,23883,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1234.673317][T23883] (syz-executor.4,23883,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:46 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\'SKj'}, 0x0, 0x0, @planes=0x0}) 18:53:46 executing program 5: r0 = fsopen(&(0x7f0000000100)='iso9660\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x3) 18:53:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:46 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:53:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x18) [ 1235.431084][T23897] (syz-executor.4,23897,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1235.441617][T23897] (syz-executor.4,23897,1):ocfs2_fill_super:1190 ERROR: status = -22 18:53:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x0, @remote}}) 18:53:47 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 18:53:47 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x9, &(0x7f0000000000)=0x300, 0x4) 18:53:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 18:53:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:47 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 18:53:48 executing program 0: r0 = socket(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000140), 0x7, &(0x7f00000001c0)={0x0}}, 0x0) 18:53:48 executing program 1: sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) 18:53:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x4, 0x0, &(0x7f00000000c0)) 18:53:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401}, 0x14}}, 0x0) 18:53:48 executing program 5: bpf$PROG_LOAD(0xd, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:53:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:48 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xc3000083) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xc3000083) inotify_rm_watch(r1, r2) 18:53:48 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 18:53:48 executing program 5: socketpair(0xa, 0x1, 0x0, &(0x7f0000000080)) 18:53:48 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:53:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:53:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:49 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2001, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) write$ppp(r0, &(0x7f0000000080)='D', 0x1) 18:53:49 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x4d) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) 18:53:49 executing program 0: r0 = socket(0xa, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000580)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 18:53:49 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x29, 0x3, 0x0, 0x0) 18:53:49 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x73, 0x0, &(0x7f0000000100)=0x8300) 18:53:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x482, 0x4) 18:53:49 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x4a, 0x0, 0x0) 18:53:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f00000000c0)) 18:53:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}]}, &(0x7f0000000100)=0x10) 18:53:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x721}, 0x14}}, 0x0) 18:53:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') 18:53:50 executing program 5: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 18:53:50 executing program 1: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f000000015000100000000000c0632ae2c"], 0xf0}}, 0x0) 18:53:50 executing program 0: ioperm(0x0, 0x8, 0x42dd) getsockopt$nfc_llcp(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 18:53:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x800455d1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 18:53:50 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x541b, 0x0) 18:53:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='\x00') 18:53:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x5452, &(0x7f0000000900)={0x0, @can, @ipx={0x4, 0x0, 0x0, "e8e401f51ee3"}, @ethernet={0x0, @link_local}}) 18:53:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, 0x2, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x8, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) 18:53:51 executing program 5: r0 = socket(0xa, 0x3, 0x3d) ioctl$sock_SIOCGIFCONF(r0, 0x8923, &(0x7f00000003c0)=@buf={0xc0fe}) 18:53:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='\x00') 18:53:51 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x82031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 18:53:51 executing program 2: r0 = socket(0xa, 0x3, 0x3d) ioctl$sock_SIOCGIFCONF(r0, 0x890c, 0x0) [ 1239.564208][T24015] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 18:53:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='\x00') 18:53:52 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000240)={0x18, 0x8000000000000001}, 0x18) 18:53:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000200003"], 0x34}}, 0x0) 18:53:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="efff"], 0x30}}, 0x0) 18:53:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 18:53:52 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x2a, 0x0, 0x0) 18:53:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f00000000c0)) [ 1240.437229][T24037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:53:52 executing program 5: syz_usb_connect(0x0, 0x4b, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xee, 0x62, 0x13, 0x0, 0xdd8, 0x1060, 0xa804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0x9a, 0x6a, 0x0, [@hid_hid={0x9}, @uac_control={{}, [@input_terminal={0xc}]}], [{{0x9, 0x5, 0x8, 0x0, 0x200}}]}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f0000000580)={0x0, @empty, 0x0, 0x0, 'ovf\x00'}, 0x2c) 18:53:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) [ 1240.573604][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:53:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x82, 0x0, &(0x7f00000000c0)) 18:53:52 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040001,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f00000001c0)='fuse\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x2001027, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 18:53:52 executing program 0: r0 = getpgid(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)={r2}) 18:53:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENT(r0, 0x0, 0x0) [ 1241.138649][ T8714] usb 6-1: new high-speed USB device number 2 using dummy_hcd 18:53:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="00000000000000000000030009"], 0x28}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) 18:53:53 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendto$phonet(r0, 0x0, 0x0, 0x24040010, 0x0, 0x0) 18:53:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 18:53:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40505412, 0x0) [ 1241.418370][ T8714] usb 6-1: device descriptor read/64, error 18 18:53:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, 0x0) 18:53:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000020c0)={0x6666666666667a1, 0x0, [{}]}) [ 1241.818274][ T8714] usb 6-1: device descriptor read/64, error 18 [ 1242.098853][ T8714] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1242.377809][ T8714] usb 6-1: device descriptor read/64, error 18 [ 1242.785116][ T8714] usb 6-1: device descriptor read/64, error 18 [ 1242.908034][ T8714] usb usb6-port1: attempt power cycle [ 1243.642339][ T8714] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1243.750383][ T8714] usb 6-1: Invalid ep0 maxpacket: 0 [ 1243.907527][ T8714] usb 6-1: new high-speed USB device number 5 using dummy_hcd 18:53:55 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_dccp_buf(r0, 0x29, 0x0, 0x0, 0x0) 18:53:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x2a141) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_RESET(r0, 0x5514) 18:53:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000003300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80284504, 0x0) 18:53:55 executing program 2: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmsg$kcm(r0, &(0x7f00000020c0)={&(0x7f00000009c0)=@nl=@unspec, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000000)="ca3ae2a1000063120001000000000000100000006b353f730009c399f6710eb2000000001e7ff22e", 0x28}], 0x1}, 0x0) 18:53:55 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f0000000000)) 18:53:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) [ 1244.088397][ T8714] usb 6-1: device descriptor read/8, error -71 [ 1244.298245][ T8714] usb 6-1: device descriptor read/8, error -71 [ 1244.418214][ T8714] usb usb6-port1: unable to enumerate USB device 18:53:56 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsa\x00', 0x141c02, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'rwm\x00'}, 0xa) 18:53:56 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xf}, 0x0) 18:53:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x1, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 18:53:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x3, 0x0, &(0x7f00000000c0)) 18:53:56 executing program 5: setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x72020000, 0x65}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 18:53:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc0045516, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 18:53:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0)) 18:53:57 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:53:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffffffffffff78}}, 0x0) 18:53:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) 18:53:57 executing program 0: r0 = socket(0xa, 0x3, 0x4) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000014c0)={&(0x7f0000001400), 0xc, &(0x7f0000001480)={0x0}}, 0x0) 18:53:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x10, 0x0, &(0x7f00000000c0)=0xb00) 18:53:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000003300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40284504, 0x0) 18:53:57 executing program 4: r0 = syz_init_net_socket$rose(0xffffffff00000003, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e3, &(0x7f0000000380)=@default) 18:53:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) 18:53:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 18:53:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) 18:53:58 executing program 4: socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000000000)) 18:53:58 executing program 5: socket$kcm(0x11, 0x3, 0x0) socketpair(0x11, 0xa, 0x0, &(0x7f0000000000)) 18:53:58 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x3, 0x0, 0x0) 18:53:58 executing program 0: r0 = socket(0xa, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40012100) 18:53:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x3f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000480), 0x5, 0x0}}) 18:53:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}}, 0x0) 18:53:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0xd, 0x0, &(0x7f00000000c0)=0x4) 18:53:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {0x2, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 18:53:59 executing program 2: socket$kcm(0x29, 0x5, 0x0) select(0x40, &(0x7f0000000300)={0x8}, 0x0, 0x0, 0x0) 18:53:59 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x40001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) [ 1247.564979][T24173] sctp: [Deprecated]: syz-executor.4 (pid 24173) Use of int in maxseg socket option. [ 1247.564979][T24173] Use struct sctp_assoc_value instead 18:53:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xf0ff7f}}, 0x0) 18:53:59 executing program 3: io_setup(0x1fc, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000040)) io_setup(0xff, &(0x7f00000000c0)) io_setup(0x3, &(0x7f0000000100)) 18:53:59 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x541b, 0x0) 18:53:59 executing program 4: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x7d, 0x0, &(0x7f0000000100)) 18:53:59 executing program 0: r0 = socket(0x1d, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 18:54:00 executing program 2: r0 = socket(0x2, 0x1000000000002, 0x0) getsockopt$nfc_llcp(r0, 0x10f, 0x29, 0x0, 0x531000) 18:54:00 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 18:54:00 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:54:00 executing program 3: r0 = socket(0x2, 0x2, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 18:54:00 executing program 4: r0 = socket(0xa, 0x3, 0xff) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xffff}, 0x20) 18:54:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x24, 0x0, &(0x7f00000000c0)) 18:54:00 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0xc0) 18:54:00 executing program 3: r0 = socket(0xa, 0x5, 0x0) sendmmsg(r0, &(0x7f0000006a00)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="05", 0x20000101}], 0x1}}], 0x1, 0x0) 18:54:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 18:54:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:54:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000380)="14", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) 18:54:01 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x66, 0x0, &(0x7f0000000100)=0x8300) 18:54:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) 18:54:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {0x3, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x4, 0x18}]}, 0x18}}, 0x0) 18:54:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='#'], 0x23}}, 0x0) 18:54:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/147) 18:54:02 executing program 5: r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_dccp_buf(r0, 0x29, 0x0, 0x0, 0x0) 18:54:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0xe, 0x0, &(0x7f00000000c0)=0x700) [ 1250.409348][T24235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24235 comm=syz-executor.2 18:54:02 executing program 0: r0 = socket(0xa, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) 18:54:02 executing program 3: r0 = socket(0x2, 0x1000000000002, 0x0) getsockopt$nfc_llcp(r0, 0x11, 0x66, 0x0, 0x531000) 18:54:02 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:54:02 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0xc0045009, 0x0) 18:54:02 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 18:54:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x28}}, 0x0) 18:54:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x1, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x3}}]}]}, 0x50}}, 0x0) [ 1251.341214][T24254] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1251.437201][T24258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:54:03 executing program 1: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, 0x0, &(0x7f0000000100)=0x8300) 18:54:03 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x7b, 0x0, &(0x7f0000000100)=0x8300) 18:54:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000003300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40044581, 0x0) 18:54:03 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000340), 0x0, 0x1a, 0x0) 18:54:03 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 18:54:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045565, 0x0) 18:54:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x58, 0x1, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 18:54:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f00000000c0)) 18:54:03 executing program 4: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76fb87089f766ba, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:54:03 executing program 5: r0 = socket(0x10, 0x2, 0x9) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:54:04 executing program 2: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) 18:54:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000003300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)) 18:54:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80) 18:54:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x5}, 0x14}}, 0x0) 18:54:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x3c) 18:54:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netrom_NETROM_T4(r0, 0x10e, 0x6, 0x0, 0x300) 18:54:04 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 18:54:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x40) 18:54:05 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) 18:54:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 18:54:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 18:54:05 executing program 3: r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x40}) 18:54:05 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 18:54:05 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 18:54:05 executing program 3: bpf$MAP_UPDATE_ELEM(0x6, 0x0, 0x82) 18:54:06 executing program 1: r0 = socket(0xa, 0x3, 0x4) bind$bt_hci(r0, 0x0, 0x0) 18:54:06 executing program 2: bpf$MAP_UPDATE_ELEM(0x1a, 0x0, 0x0) 18:54:06 executing program 0: r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) 18:54:06 executing program 5: bpf$MAP_UPDATE_ELEM(0x13, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) 18:54:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private2}, 0x10, 0x0}, 0x0) 18:54:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240)='/dev/net/tun\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 18:54:06 executing program 2: add_key$user(&(0x7f0000000440)='user\x00', 0x0, 0x0, 0x0, 0x0) 18:54:06 executing program 5: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0xd, 0x0, &(0x7f0000000100)=0x8300) 18:54:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @private2, 0x3f}, 0x80, 0x0}, 0x0) 18:54:06 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x10c, 0x0, 0x0, 0x4) 18:54:06 executing program 3: r0 = socket(0x1, 0x2, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x5411, 0x0) 18:54:07 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 18:54:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000001c0)=0x100, 0x4) 18:54:07 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:54:07 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) 18:54:07 executing program 4: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x4, 0x0) 18:54:07 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsa\x00', 0x141c02, 0x0) write$cgroup_devices(r0, &(0x7f0000000c80)=ANY=[], 0x8) 18:54:07 executing program 2: r0 = socket(0x2c, 0x3, 0x0) bind$phonet(r0, &(0x7f0000000000), 0x10) 18:54:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {0x3, 0x0, 0x9}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 18:54:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x14, 0x0, &(0x7f00000000c0)=0x700) 18:54:08 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_raw(r1, &(0x7f0000000400)={"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"}, 0x2200) read$FUSE(r0, &(0x7f000000f400)={0x2020}, 0x2020) 18:54:08 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0xc0045002, 0x0) 18:54:08 executing program 3: r0 = syz_init_net_socket$rose(0xffffffff00000003, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e1, &(0x7f0000000380)=@default) 18:54:08 executing program 4: r0 = socket(0x2, 0x1, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000162) 18:54:09 executing program 1: r0 = socket(0xa, 0x3, 0x3d) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x2, 0x0, 0x0, "0b9a485d9dfa23ed106e5d90282e0d0e4176049896761171350420283619a4911e05c39df2ec7911155e105a70618801f2e698de28eb653273b25a6e4e4b13"}, 0x60, 0x0}], 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf) 18:54:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 18:54:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:54:09 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x20) 18:54:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8929, &(0x7f0000001180)={'ip6gre0\x00', 0x0}) 18:54:09 executing program 4: setresuid(0x0, 0xee01, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 18:54:09 executing program 5: r0 = socket(0xa, 0x3, 0x3d) ioctl$sock_SIOCGIFCONF(r0, 0x890c, &(0x7f0000000000)=@buf={0xd, &(0x7f0000000040)="915321feee8dfe98c0296179b7"}) [ 1257.349704][T24384] (syz-executor.2,24384,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 1257.360213][T24384] (syz-executor.2,24384,0):ocfs2_fill_super:1190 ERROR: status = -22 18:54:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7, 0x7, 0xfd5, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 18:54:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_MARK_MASK={0x8}]}, 0x1c}}, 0x0) 18:54:09 executing program 2: add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) faccessat(0xffffffffffffffff, 0x0, 0x0) 18:54:09 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) 18:54:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0x2, 0x4e24, 0xe0000000, @private2}, 0x80, 0x0}, 0x0) 18:54:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0xfffffffffffffdba) 18:54:10 executing program 3: r0 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x2, 0x0, 0x0, 0xffffffffffffffff) 18:54:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x38) 18:54:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 18:54:10 executing program 5: r0 = socket(0x1, 0x80005, 0x0) accept4$netrom(r0, 0x0, 0x0, 0x0) 18:54:10 executing program 4: r0 = socket(0x25, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 18:54:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0xc0189436, &(0x7f0000000180)="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") 18:54:10 executing program 4: getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) 18:54:10 executing program 2: r0 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x2, &(0x7f0000001480)='./cgroup.cpu/syz0\x00', 0x0, 0xffffffffffffffff) 18:54:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x4, 0x8, 0x5}, 0x14}}, 0x0) 18:54:10 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x4) 18:54:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000003300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80044584, 0x0) 18:54:12 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 18:54:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x81785501, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 18:54:12 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x35, 0x0, 0x300) 18:54:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 18:54:12 executing program 0: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 18:54:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x75, 0x0, &(0x7f00000000c0)) 18:54:12 executing program 3: r0 = socket(0xa, 0x3, 0x3d) ioctl$sock_SIOCGIFCONF(r0, 0x8932, &(0x7f00000003c0)=@buf={0xc0fe}) 18:54:12 executing program 0: bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) 18:54:12 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0xf}], 0x10}, 0x0) 18:54:12 executing program 4: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000001680)='-\\^\x00') 18:54:12 executing program 5: getpid() 18:54:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_dccp_buf(r0, 0x88, 0x0, 0x0, 0x0) 18:54:13 executing program 1: r0 = socket(0x23, 0x2, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x0) 18:54:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0x2, 0x4e24, 0x0, @private2}, 0x80, 0x0}, 0x0) 18:54:13 executing program 4: bpf$MAP_UPDATE_ELEM(0x19, 0x0, 0x0) 18:54:13 executing program 5: keyctl$KEYCTL_MOVE(0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) 18:54:13 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0xc, 0x0, &(0x7f00000000c0)=0x300) 18:54:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x30, 0x0, 0x0) 18:54:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001180)={'sit0\x00', 0x0}) 18:54:13 executing program 4: r0 = socket(0x2a, 0x2, 0x0) getsockname$ax25(r0, 0x0, &(0x7f0000000280)) 18:54:13 executing program 2: r0 = socket(0x2, 0x1000000000002, 0x0) getsockopt$nfc_llcp(r0, 0x88, 0xa, 0x0, 0x531000) 18:54:13 executing program 3: r0 = socket(0x23, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8932, &(0x7f00000000c0)={'vxcan0\x00'}) 18:54:14 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80044df9, &(0x7f0000000180)) 18:54:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x172}, 0x40) 18:54:14 executing program 2: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000000)=@ethtool_gstrings}) 18:54:14 executing program 4: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x18, 0x0, &(0x7f0000000100)) 18:54:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$nfc_llcp(r0, 0x10e, 0xc, 0x0, 0x400000) 18:54:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000090001800800030003000000140002"], 0x34}}, 0x0) 18:54:14 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) 18:54:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 18:54:15 executing program 2: r0 = socket(0xa, 0x3, 0x3d) ioctl$sock_SIOCGIFCONF(r0, 0x8946, &(0x7f00000003c0)=@buf={0xc0fe}) 18:54:15 executing program 4: r0 = socket(0x1, 0x3, 0x0) connect$l2tp6(r0, 0x0, 0x0) 18:54:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) 18:54:15 executing program 5: keyctl$instantiate_iov(0x17, 0x0, 0x0, 0x0, 0x0) 18:54:15 executing program 0: r0 = socket(0xa, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec={0xa}, 0x80) 18:54:16 executing program 1: r0 = socket(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bind$netrom(r0, &(0x7f0000000300)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 18:54:16 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 18:54:16 executing program 3: r0 = socket(0x11, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000006780)={0x0, 0x0, 0x0}, 0x2000) 18:54:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x4b, 0x0, 0x300) 18:54:16 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 18:54:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 18:54:16 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000140)) 18:54:16 executing program 2: r0 = socket(0x1e, 0x1000000000004, 0x0) getsockopt$nfc_llcp(r0, 0x10f, 0x0, 0x0, 0x400000) 18:54:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000340)) 18:54:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000480)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr}) 18:54:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x405c5503, 0x0) 18:54:16 executing program 2: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890b, &(0x7f0000000040)={'batadv0\x00'}) 18:54:17 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='.\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890b, &(0x7f0000000040)={'batadv0\x00'}) 18:54:17 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x74, 0x0, &(0x7f0000000100)) 18:54:17 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8971, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:54:17 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) 18:54:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x19, 0x0, 0x0) 18:54:17 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f000000b440)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@op={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000003a40)="d418777cee132ede3c4d7c7a9adf9abc", 0x10}], 0x1}], 0x4, 0x0) 18:54:17 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) write$FUSE_IOCTL(r0, 0x0, 0x0) 18:54:17 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$nfc_raw(r0, &(0x7f0000000000), 0x10) 18:54:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 18:54:17 executing program 2: r0 = socket(0x2, 0x1000000000002, 0x0) getsockopt$nfc_llcp(r0, 0x11, 0x65, 0x0, 0x531000) 18:54:18 executing program 5: r0 = socket(0x1e, 0x805, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x8982, &(0x7f0000000040)={'vlan0\x00'}) 18:54:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)) 18:54:18 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x87}, {0x6}]}) 18:54:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000001}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:18 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8923, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:54:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x80, 0x0}, 0x0) 18:54:18 executing program 5: keyctl$KEYCTL_MOVE(0x18, 0x0, 0x0, 0xfffffffffffffffc, 0x0) 18:54:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 18:54:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc1105517, &(0x7f0000000000)) 18:54:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000000080)={0x18, 0x35, 0x1, 0x0, 0x0, "", [@typed={0x2}, @nested={0x4}]}, 0x18}], 0x1}, 0x0) 18:54:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000001}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:19 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6c, 0x0, &(0x7f0000000100)) 18:54:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8004ae98, &(0x7f00000020c0)) 18:54:19 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x34000}}, 0x0) 18:54:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000140)={0x4c, 0x68, 0x1}, 0x4c}}, 0x0) 18:54:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_POLL(r0, &(0x7f0000000280)={0x18}, 0x18) write$char_raw(r0, &(0x7f0000000400)={"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"}, 0x1200) 18:54:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000001}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:20 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 18:54:20 executing program 3: bpf$MAP_UPDATE_ELEM(0x9, 0x0, 0x0) 18:54:20 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f0000000680)={'batadv_slave_1\x00'}) 18:54:20 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 18:54:20 executing program 0: r0 = socket(0xa, 0x3, 0x3d) sendmmsg$nfc_llcp(r0, &(0x7f0000001340)=[{&(0x7f0000000040)={0x27, 0x0, 0x1, 0x2, 0x73, 0x13, "0b9a485d9dfa23ed106e5d90282e0d0e4176049896761171350420283619a4911e05c39df2ec7911155e105a70618801f2e698de28eb653273b25a6e4e4b13", 0xd}, 0x60, &(0x7f0000001200)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="7d4d5af597c6c53d1e09a2ea4c42e6db01f867002656fdfaa45177b66a6cd0e2327319d1c492b794ddd667d1d8cb196bc5b4e4f0ee219e3af981459f2ad42ebbcf54f246569496d0c356bbf57cf05a2cc05afc80da52f1b5071732fa5b887095c3e4e25fb8409e7d26598ed410d132a7fe787f9fb97ac4150cff6c27c563c035c91d", 0x82}, {&(0x7f0000001180)="1ad87a2bbf01b47e450e7de08e6e4bdfb54a57c461b35c0332f91c368c70aed8a46d951c5084ae9c6ea0d8daf00fb9d1ac7a3641eb0fed0a624f14696e5d0caf47751deadf02fbee5c6e5371ea6a66899e104b3c9a7197a14e", 0x59}], 0x3, &(0x7f0000001240)={0xd0, 0x112, 0x9, "d097d59a09681de15bdb3b04072c90e09f62b115134737879360e124e42b85c139ae15c9eb949752cc88c0c37c4b5ec89629b317da08be860b917db737cde8f9a0c6444de4083ee79ce1e72a506049cb28a484b96d47adcc429bfd3f328ef5125f837dfa9dec77cb6136dca1a1fe91226e7a7a970a48377e63e47c8383f89efa90eddbca75bbe3c353d6e9a95b2f1b1aad69a3ce51a0d36631874b9f8bdf144105b79fe80bf1c29933f3f8f3d5548e2bee8f66bc340f4804440ee0b7494245"}, 0xd0, 0x44}], 0x1, 0x4000) io_setup(0xde9c, &(0x7f0000000000)=0x0) io_destroy(r1) io_destroy(r1) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf) 18:54:20 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x541b, 0x0) 18:54:20 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vcs\x00', 0x40402, 0x0) write$rfkill(r0, 0x0, 0x0) 18:54:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000001}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x8, 0x0, &(0x7f00000000c0)) [ 1269.701073][T24688] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 18:54:21 executing program 1: r0 = socket(0x2, 0x1000000000002, 0x0) getsockopt$nfc_llcp(r0, 0x88, 0x64, 0x0, 0x531000) 18:54:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xb, 0x0, 0x0) 18:54:21 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket$nl_route(0x10, 0x3, 0x0) 18:54:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:21 executing program 5: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:54:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x1e, 0x0, &(0x7f00000000c0)=0x700) 18:54:22 executing program 5: accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:54:22 executing program 2: bpf$MAP_UPDATE_ELEM(0x17, 0x0, 0x0) 18:54:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551a, 0x0) 18:54:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:22 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x29, 0x8, 0x0, 0x0) 18:54:22 executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)={0x8, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 18:54:22 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x4000a0, 0xe, 0x5ac484bb51fa106a, &(0x7f0000000040)="4d50b441e692763513ef874565020007000112bbf3159fd0880f892fd398e4020a00001375bc847d142d1523389037a1d4f5631813cf7037fd584b4af7507a849ce80deea1a57733a5e3730fbef42ab9bedd390775bf809fbcf2a71f32d41a1f7ff3b5483107766a8bd0033d44e6ef7b526c8c67aa9847e283c6cdccbd627ad1094342b1840b506814cb319132533f6d740d9643d0c6dc8481d0c9643dd3e0aa6e1be581aca3ea9377136ce8dd480207fba7af225672c63802beb9647a5fbe90781e147e92eae8d9d79d0d", 0x0, 0x23, 0x0, 0x22d, 0x1000000}, 0x28) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x6, 0xa, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x600}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24004019) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0xf00, &(0x7f0000000340)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}, 0x0) 18:54:22 executing program 5: r0 = socket(0x2, 0x1000000000002, 0x0) getsockopt$nfc_llcp(r0, 0x11, 0x67, 0x0, 0x531000) 18:54:22 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001c80)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)="e0", 0x1}], 0x1}, 0x40) 18:54:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 18:54:22 executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x12000005f) 18:54:22 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x420002, 0x0) 18:54:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000001}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000000c0)) 18:54:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) 18:54:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x79, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) 18:54:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffe3dc}, 0x42, 0x0, 0x0, 0x7, 0x204577c7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r1, 0x0, &(0x7f0000000440)=""/29}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4000}) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x6, 0x8, 0x0, 0x6, 0x0, 0x4, 0x80009, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x65, 0xfff, 0x8, 0xa3e3, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)='gre0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="e6353e00003c84d9c75cd570f8d5969d77ef60b9a0", 0x15}], 0x1}, 0x0) socketpair(0x3b, 0x4, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)='gre0\x00') r2 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x38, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000340)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="690200003c00052fd25a80648c63940d0224fc60100002400a000200051a82c137153e670502018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 18:54:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x12000005f) 18:54:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)="b09fae92224e", 0x6}], 0x1, &(0x7f0000000940)=ANY=[], 0x8}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x24000844) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1150], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000009c0)=0x7fff8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000b80)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, 0x0}, 0x800) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000) [ 1273.377474][T24770] =====================================================