PC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x440d0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x38100, 0x2) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000280)='./bus\x00', r3) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x80140, 0x0) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3cc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40008880}, 0x24008805) getdents64(r1, &(0x7f0000000100)=""/57, 0x39) 18:30:31 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 308.327728][ T32] audit: type=1804 audit(1595269831.261:69): pid=11444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219792501/syzkaller.vgic5F/101/bus" dev="sda1" ino=16064 res=1 18:30:31 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) [ 308.526338][ T32] audit: type=1804 audit(1595269831.391:70): pid=11451 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/30/bus" dev="sda1" ino=16078 res=1 18:30:31 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0xd0002, 0x153) madvise(&(0x7f0000472000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x29, 0x0, "bdb0c710bb686e0d8d5f33027c65a510ff119d0fb71987c075c8fda1d72b90c759e7043f05e30bbbc3ff10d2a79020e764f4623b4691d49bb5917177b243139e8f6f762d85c01aba367e821786402151"}, 0xd8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1411, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008004) 18:30:31 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:30:31 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f00000000c0)={0x9d0000, 0x400, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x6, [], @ptr=0x7}}) sysfs$1(0x1, &(0x7f0000000140)='&..{#{\'\x00') prctl$PR_CAPBSET_DROP(0x18, 0xf) 18:30:31 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "1c29974fb3b59eb882f8ed5d79b75d27ecfb67575018ad41aed776efbe8a2d44c00d53d2e9000810d948e26cf476da34fe5c0668c46ae0e5c2a9003faf56c1da36746dfb46508e05078f9042bc7d06b0862918fca1256f5fb76f5e73dbe4e034f9df4c628e2de4f65c667fcbfca4af2df4e2e76671c1d9e4e0"}, 0x7d) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) write$proc_mixer(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x83) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:31 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1, r2}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:30:31 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0x400000000000316, 0x1fffffea) 18:30:32 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:30:32 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x400280, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000140)={0x980000, 0x0, 0x3, r1, 0x0, &(0x7f0000000100)={0x980901, 0x9, [], @string=&(0x7f00000000c0)=0x7f}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000040)={0xa, 0x3, 0x400, 0x0, '\x00', 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000180)) [ 309.227757][ T32] audit: type=1804 audit(1595269832.161:71): pid=11477 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir943396610/syzkaller.qgyRYB/79/bus" dev="sda1" ino=16092 res=1 18:30:32 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000151000/0x3000)=nil, 0x3000, 0x4) [ 309.438689][ C0] hrtimer: interrupt took 79314 ns 18:30:32 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) recvfrom$packet(r0, &(0x7f00000000c0)=""/147, 0x93, 0x0, &(0x7f0000000000)={0x11, 0x7, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 18:30:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x4, 0x8, 0xf1a, 0x13c}, 0x40) 18:30:32 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xa}, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:33 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socket$phonet_pipe(0x23, 0x5, 0x2) 18:30:33 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0x400000000000316, 0x1fffffea) 18:30:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x0, 0x8, 0xf1a, 0x13c}, 0x40) 18:30:33 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00') r0 = gettid() tkill(r0, 0x8) getpriority(0x0, r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) lsetxattr$security_evm(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "3330e303a531e6f218a7892c"}, 0xd, 0x3) ioctl$NBD_DISCONNECT(r1, 0xab08) 18:30:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xf1a, 0x13c}, 0x40) 18:30:33 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./bus\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:33 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000012c000/0x4000)=nil) 18:30:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x13c}, 0x40) 18:30:34 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffff08d]}, 0x0, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f00002c8000/0x4000)=nil, 0x4000, 0x8) 18:30:34 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x204000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xffff, 0x5, 0x0, 0xed5}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 18:30:34 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mincore(&(0x7f0000576000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/243) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:34 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00b23400000000000000000030b6dea64a3cb8439c4faed42bdc7e084b6bd00ecbb18d6a3e6355eb7c5bbd0c6da14eea503b040827b6ce10847943317c25fbf17ca7e13952f2a0281b17418b13365c23bfe8dca8399199391539f58b2cf91c3383f16f69751b48f64fc829014f1f68071966729019568e5528e6922ed5ef0e397ced801d81191bb8cb4dd3a0e15782a5ea", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa607a5e34794710bdaaaaaa0000e90c300000000000000000000000000200"/47, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="49de8464c9223fd16c062a52b05fd333338768b2b39e76f6d25dca2fe35f6d051d74e5579adaa24a3bdcdd0fedfc542762eb44e9d2c436b82404bba160a846ae706a7f65ead0d6ebf533ea29f5bb4514533d1d8fcef0751e7e79da7213993b454767873648c4ec01697b9fed2ff950468a99c64767d51727ba05c4286fd913e4b24d42aa66945ca43b71075d76a4b29fd964c9393e2e734be4d869e5a94c352a88516ece74fcfafc7f2ba99b4a31bb5109c8bd9a604eeb0608052824f79b29bc2e152782c1f663948139ac919ae09f40923337250b0a4622425ca35ed9a28ca33d47b330fbc2c55cdf8295"], 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400d36d887e0939070040b3010064edb6820fc720471ebf868ea124feac4f2e3302c34546c91410b123deed91e4b5fd5f46fbaa7b8f800c762aa86ace6ad9c4d3d1b48965338032eaae969d6e2a45345c9e6ee33bb7ceb819716776a5a1b7864ed8321a15824456a9ec84f345434d15d10fa031d8f0aade89cc19788e6638b5ad919599fb3ca98655c819dd1277d428d6e8207853eb70ea23e02c181f03e43892d41fb39337793c86800be7a96af493663597f42be7e7d5ae097a", @ANYRES16=r2, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) write$sndseq(r3, &(0x7f0000000700)=[{0x9, 0x6, 0x1f, 0x8, @time={0x7, 0x3}, {0x1f, 0x1}, {0xff}, @note={0x3f, 0x4, 0x3, 0x2, 0xfff}}, {0x5, 0x1, 0x80, 0x5, @tick=0x8, {0x3, 0x1f}, {0x2}, @note={0x7, 0x3, 0xfd, 0x0, 0x8000}}, {0x0, 0x4, 0x20, 0x59, @time={0x1, 0x100}, {0x2, 0x8}, {0x4, 0x1}, @ext={0xb8, &(0x7f0000000640)="08a2ee3c028c722018985d11982f4bd54ae56624675d0faac6701f29665dbcaeb00704ec65707dc9fd0b512fa92dbf75aafae297af6ca6e5ff748ddccc1261903930915a1e92110eafc0810e92de07c421828619f9e453315c54335e9e0cb075d1438bfb2e6ec78765d24a2b11ea334535c0d4f29c52ad1dfce0b88db4ab4d1630b03e52118fe83cefd269151bd107483319933c18f90e88a943dea5313d37ad0a5b5a7d930172c75669db80dc543c01a33383c9c5649dac"}}, {0x5, 0x4, 0x1f, 0x8, @tick, {0xc1}, {0xfe, 0x4}, @queue={0x0, {0x292a, 0x20}}}], 0x70) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 311.649302][T11541] __nla_validate_parse: 11 callbacks suppressed [ 311.649333][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500), 0x40) [ 311.772252][T11550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11550 comm=syz-executor.0 [ 311.826240][T11541] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.836072][T11541] net_ratelimit: 144 callbacks suppressed [ 311.836088][T11541] netlink: zone id is out of range [ 311.847284][T11541] netlink: zone id is out of range [ 311.852584][T11541] netlink: zone id is out of range [ 311.857815][T11541] netlink: zone id is out of range [ 311.862967][T11541] netlink: zone id is out of range [ 311.868269][T11541] netlink: zone id is out of range [ 311.873421][T11541] netlink: zone id is out of range [ 311.878724][T11541] netlink: zone id is out of range [ 311.883861][T11541] netlink: zone id is out of range [ 311.889098][T11541] netlink: zone id is out of range 18:30:35 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:35 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:35 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x6b, "e114a65bc135e9a6690637eaa38e5c230b424c1c686bb4fe3bf00884bc957a092d8246aedd5b89b96a5d9d3cca010e86272ebc93c2b1d765449c277a3f30d049e43562ebfa0b10000398648eed46d833fa14dbcfcb9afa2a55559a90b5123ecf3151c80501a90401cd3d55"}, &(0x7f0000000000)=0x8f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 312.451422][T11550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11550 comm=syz-executor.0 18:30:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500), 0x40) 18:30:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) 18:30:35 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x8) 18:30:35 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x80000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r2, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', r4, 0x29, 0x8, 0xfa, 0x80000001, 0x4, @local, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3f}}, 0x1, 0x8, 0xc1c, 0xffffffff}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) mremap(&(0x7f00000c7000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f00003c2000/0x3000)=nil) 18:30:36 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f0000560000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x8000000, 0x1ff, 0x3}) 18:30:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500), 0x40) 18:30:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x902, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) getsockname$unix(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0x2e}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\a\x00\x00', @ANYRES16=r4, @ANYRESOCT=0x0], 0x26c}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0a000400050082c137e71f69500dbeddaef01700d1bd", 0x26}], 0x1}, 0x0) 18:30:36 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x441c3, 0x141) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:36 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) unlink(&(0x7f0000000000)='./bus\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002dbd7000fedbdf250300000010000000000000ffec00000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x19, 0x55, &(0x7f00000001c0)="da36482529c5f49f2635974cd6fcd1d429eae7cb2b90574c3b", &(0x7f0000000200)=""/85, 0x6, 0x0, 0xe4, 0x8a, &(0x7f0000000280)="d8e994f9fb1e1512e95cb33638d2e8820b89152bb30a0a57cb607a0eabbb95784cde0d5d59ecec4bb9816ca2780705ed78f8dd4a9fb5e5ea5899d2d9f88dd7d891980998567f622c14b37af1ef71aeaa9a458794cfb8fde5aa1e7dfae27d28c8523c1ad39a98be330648361864d799064267cf53945bc2851a7f607f10617b197e55531a699c0e371bd2685757f0cbc2b0ec9162edd09d8f006b057aa19826b5d9cf2563e6b866fefcc4cda3a6eccac27c587f4294071bfd809fbc97f07d409e4c27197f2e900d6a32d6293edf2bec7ba920a1a69d0b6fc2cd490de85391a19dbc96c172", &(0x7f0000000380)="6f73cc728639a87e0c24d90d8af601727ad8db06544d09350bb309afa74edbdb7a863ac4ee4dbfcf16788d284cc1e221f5cfdb442d6d08b157ef3e3b317f02158de49b751a2f0e89f30f8bfc288436216de0e1f9d788db2c5c62c3af431781dfd4fe98e7b970b402c7b8b40fce796a5cb31501b9dc5ad9062d14a7d175a454ac5a27b1f519eb6dd107ea"}, 0x40) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)={0x8}) [ 313.844523][ T32] audit: type=1800 audit(1595269836.782:72): pid=11596 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16078 res=0 18:30:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00'}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 18:30:37 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)=0x1) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x100, 0x3, 0xfff, 0x3, 0x6}, &(0x7f0000000240)=0x98) 18:30:37 executing program 0: add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="3b5c0a3401a3daf9f1941132d7aa2ed1f26331bc2289b5ef001f139bfbc8ebb727014838b5d3807e674cda1b1da67ab1c1c33604bdcb3c601ae13d98c25aa66327855ec23b6045d081bff4bd48d866515da91209cef700613f62e9bce4eb98f4a2c6e67e5b81da2daa898ce84eb1e6a938fe9e6ad9106f1d56ae834146584fc152ab64eb9e8709378ce8e620e4b3e7325c6d", 0x92, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r2) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) keyctl$link(0x8, 0x0, r2) keyctl$clear(0x7, r2) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)=0x20000) r5 = gettid() r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r6, 0xc0c0583b, &(0x7f0000000080)) ioctl$KVM_ASSIGN_PCI_DEVICE(r6, 0x8040ae69, &(0x7f00000000c0)={0xff, 0xfff, 0x8001, 0x3, 0x9}) tkill(r5, 0x8) write$P9_RGETLOCK(r4, &(0x7f0000000080)={0x1f, 0x37, 0x1, {0x2, 0x100000000, 0x1, r5, 0x1, '\\'}}, 0x1f) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f00000010c0)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc645a0000000a040400000000c137153e370935018000f01700d1bd", 0x33fe0}, {&(0x7f0000001100)="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"}]}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x78) 18:30:37 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) openat$rdma_cm(0xffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 314.304488][T11614] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. 18:30:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = open(0x0, 0x44c142, 0x1d6) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00', 0x6}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) r3 = dup3(r0, r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) 18:30:37 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x60, 0x3, 0x800, 0x5712}) 18:30:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) setgroups(0x0, &(0x7f00000001c0)) setgroups(0x0, &(0x7f00000001c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x54, 0x2) sendto$inet6(r0, &(0x7f0000001180)="e4", 0x1a000, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x29}, 0x9}, 0x7a) openat$zero(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 18:30:37 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000003900427ca2a13e341b5fd2d1245bd3b2376d"], 0x40) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x4, 0x5, 0x401, 0x3, 0x3, "ad53813ae6f387ac459fce4f5bd0fdd7255886"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1a7281, 0x0) 18:30:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000100)={0x2b10, 0x7, 0x9, 0x2}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'syzkaller0\x00', 0x81}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:30:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0xa2001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:38 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={r4, 0x2d3, 0x5, 0x7}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={r5, 0x8b, "3a3b21b62a13300316b27e39f9f76d2ee69c28e80268d97e94c0a9688373ae84de82c2087178de6ed8ab43ac0ebc61c831142d246e095bef1e12fb2d9887a936a6ca6bc8f4d763c1e314313fa4c594108cb0ffcf398d34f3f0e3fad0ecd4e2de8d95ebaf16cc1bd5c073420845aa4f424ee2c1836bcda6fb4e0d1c37fe45ed20f8b0ad2dea23b4ebce4750"}, &(0x7f0000000340)=0x93) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x1, 0x8, 0x6}, &(0x7f0000000180)=0x98) 18:30:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = open(0x0, 0x44c142, 0x1d6) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00', 0x6}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) r3 = dup3(r0, r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) [ 315.267967][T11645] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.417719][T11647] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.452810][T11660] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:38 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = socket(0x11, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000280)={0x0, 0x80000001, 0x1, 0x89, &(0x7f0000ffe000/0x1000)=nil}) bind(r0, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x30840000}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) rt_sigsuspend(&(0x7f0000000200)={[0x4]}, 0x8) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0)) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x14) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000240)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3d4, 0x0, 0xec, 0xec, 0x2f4, 0x2f4, 0x2f4, 0x4, &(0x7f0000000340), {[{{@uncond, 0xbc, 0xec}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x8001, 0x6}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x31}, @empty, 0xff, 0x0, 0x0, 0x9, {@empty, {[0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0x1, 0x3, 0x7ff, 0x400, 0x0, 'bond_slave_0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x211}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010101, @broadcast, 0x1}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0x0, {0x5}}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x420) write$binfmt_script(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x66) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x48181, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) 18:30:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000000)={0x5, 0xffff, [{0xde619e9b, 0x0, 0x2}, {0xffffffff, 0x0, 0x6}, {0x9, 0x0, 0x8}, {0x23}, {0xfffffff8, 0x0, 0x10000}]}) 18:30:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00'}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) [ 315.709900][T11660] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:38 executing program 1: setxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="040795d950763790a8ec2713d1e402907179ffffbf3cca9470"], 0x8, 0x3) r0 = open(&(0x7f0000000080)='./bus\x00', 0x107081, 0x16c) fremovexattr(r0, &(0x7f00000002c0)=@known='system.advise\x00') ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040)={0x1ff, 0x0, 0x1}, &(0x7f00000000c0)=[{}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xb70eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) lsetxattr$trusted_overlay_opaque(&(0x7f00000004c0)='./bus\x00', &(0x7f00000005c0)='trusted.overlay.opaque\x00', &(0x7f0000000600)='y\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180)=0x3, 0x4) syz_open_dev$char_raw(&(0x7f0000000500)='/dev/raw/raw#\x00', 0x0, 0x200000) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0xfffffb10) kexec_load(0x7f, 0x3, &(0x7f0000000280)=[{&(0x7f0000000540)="022f1ad54f28526b52e22925eac0fc9a382fffa5fa238f08e1f1a816927bd6f4f445ca368fb4805f207526ad32c897961e1ec3ce691c89f010ab8c593a468628992534f5bd360cf3eb6222287000f25314ef3e79d6ee32f678561fb8a7ac", 0x5e, 0x8101, 0x7}, {&(0x7f00000001c0)="7ff6cfd7d53072094d734d7afa1792041f6e1c4e3d0d0c7285c4a3f5992b3f2ce38ced0598e079bb36545899c3253dacf63998eebe17126a7166c21083038124d2b488ae4a99298c9bc7e10e83c3eb68d436ef496d4ff3dd0d6318e91aeeb7c1dd14bca3433451eae32bab48b69c34772d96d2f9d31ca9ed2603c3d382494596df79eb3f6381020ee220f9065bbe85e4e612821bf1800912ef01ccfd329464b96f1c3a37cbca32e0f5839ad46985de846217dd44", 0xb4, 0x2}, {&(0x7f0000000340)="f266bc4d1a1a2fac8a46689a632090114c1b0da5b163c567e271186d6378665062876bf4339b1f7ed25c98b673214f8f912b245654e37398b7820be69d560fd4f8cf319680abf48f624611bba4043010f694a538e506a5f744e632a6f230659ba652228adb33a84da976d55c1aa123277db2036123dd5c27689d3aa81540777d9010d6ca26cbe3bdb1dcca1ca36053ace9b5aa9053edf2ee868bb36b423598185d97a9dbffa0597a8de9c524ee6b446c83fc680026c6e729b63a78e4380f5dd686180e160cac", 0xc6, 0x5, 0xa0}], 0x160000) [ 315.867509][T11669] x_tables: duplicate underflow at hook 1 18:30:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)="a5e0c37f95e7650ef9cbf465ebb83fe75c044e209c8bc6debd84bac7e0a49776848aeb47c429d75432201db997aa3f44714d48fab480f3ec8f542fd27adafe14bb9ae0fc9024372a066dd708858bf761b5c105d9b7369fa50974f1e17c26b73ce0fa3d38ba9330f32cef1822d91ec70da47f0d265082290ecbe28f3a87f4a4c8f54ddb9d941353fcfed38234d4d7434bfb4616f3bdafcfcff8ea921f904c0cb4a9c40ba7", 0xa4, 0x1, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) 18:30:39 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x100) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000180)) llistxattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)=""/185, 0xb9) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="d8f70f20c06635000000200f22c0640f300f20d86635080000000f22d8127500660f38085f97660f698dd2002e3663a66f0066b8010000000f01c1360f06"}], 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x9, 0xa, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 316.311795][T11688] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00'}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) 18:30:39 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000296000/0x2000)=nil, 0x2000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 316.530345][ T32] audit: type=1804 audit(1595269839.472:73): pid=11670 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir943396610/syzkaller.qgyRYB/89/bus" dev="sda1" ino=16115 res=1 [ 316.554746][ T32] audit: type=1804 audit(1595269839.482:74): pid=11693 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir943396610/syzkaller.qgyRYB/89/bus" dev="sda1" ino=16115 res=1 18:30:39 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 316.595030][T11694] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:30:39 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x125040) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:39 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000212000/0x3000)=nil, 0x3000, 0xa) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x490200, 0x0) ftruncate(r1, 0xb3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mknod$loop(&(0x7f0000000000)='./bus/file0\x00', 0x400, 0x1) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = openat$full(0xffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000240)='$\x00', &(0x7f0000000280)='./bus\x00', r0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xd0) 18:30:39 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f000026e000/0x3000)=nil, 0x3000, 0x14) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x70, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="d8f70f20c06635000000200f22c0640f300f20d86635080000000f22d8127500660f38085f97660f698dd2002e3663a66f0066b8010000000f01c1360f06"}], 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x9, 0xa, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:40 executing program 0: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x0) 18:30:40 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xdc, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb59}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x10) 18:30:40 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) lstat(&(0x7f0000000000)='./bus/file0\x00', &(0x7f00000000c0)) 18:30:40 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x13, 0x9, 0xd9}, 0x10) 18:30:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x800043fb, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:30:40 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000440)=0x7f) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000400)={0x14, 0x7, 0x8527}) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000000540)=[{0x100c, 0x19, 0x4, "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"}, {0xe8, 0x1, 0x2, "347c318b45e977e020aaf405023dea67aa930cf2050957090cac8ca21635008aaad6b545219b6ad4e6edfb01c976052fc0106260ad23f8d7bc989262de7465bede4dad316c2042a798bc1359a17c83d35b2b3eac8d36fccf3487f2d6385a8927bdd26b0674cb3b03203fe9bc08946ba9d5863478511708235bcece075ebf4803555be34675064472751f961b506d9472e6ee56083c061f6cb52aac0d74dbb3a66697ff9804ac7edf764f79345d3a07f9d37c11e77bcb29ce9f67bb4a801ba50b9df13444436fcd8cfa7e5458a0a0b318d5fd63d6cd4757cff853e8c4"}, {0x4c, 0x0, 0x9, "2359e081c3a597eb2f0c73f96409c4b8156db1549ffc2567abc0c5011fc455f10866fb533da73284151456da24a79821cd17554f31167d9c4a3c0ea8d7015572"}, {0x100c, 0x10e, 0x1, "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"}, {0x38, 0x10e, 0x7, "22f02ffc0f5dd64e04015b283cf915f8cc0ba5ab0dbf1b1c8e24f289ef4025dd6c89eaa1e4011444bd147d"}, {0x54, 0x333, 0xfffff80d, "4892f83fa583f26c55a3d44df95396451a223687589e371b5a3ad9b47b85961b74a109fc84684193972d4571c1c5205650d65fb5cead8f76f06d37ae2202ff0f20faf45168"}, {0xa0, 0x88, 0x10000082, "8dfe1e7405b555d1429bfd9363295e0716763d984c7dab324608860e25a7d232583ef811530c75e85bbb981bdbb1492bc84bb6bf6fc6505ce11242abb294b46651396157dd5e16b699c285af956aa33439b45e68326cfa78ae7ec2c24b62e5710677e54f73b4034c0fd193f9656a43026c81425b95e0b9ae24031bf3aba7cf90ee3d8aaf50f1a1333011e34d4efe4ffe2ea6"}], 0x2278}, 0x20000010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0048153e00ebffffffffff0000000000", 0x10}], 0x1}, 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000140)="0a583989a0d9553416f74c672ecd72802ce34b2d9caf00c75fddecae4eb1a4a3a824e563e680ddd9bc0a79e967", 0x2d}, {&(0x7f0000000180)="03f554658cc362926b45520046a3b420d1d1187f3a9fa02a3ea49aa4125669847d5e42b375e65a1c7a2a41b4dc8846fc5c7f728606dbeb7285b2e9efe1448fe28a402484236a1a804635790b9d31c9502397cc52f94d33dce7a653cd671de5ba9ed3240bba01b590c9b1e907ecf5dfeb05a2b99ddc568d9e07eec84f48e6af59659bd95c349b5c11838760a2ef60eb1355c2a4d22ee922536abf6af053af8b0cb1e5146de3a165f26348c3b5f2e3efab27434627dffe320954893286d9ad9b78d725cf44475e130b0af58b485c74614bd4d5c7e4015b3c9e84bc7bbc86e88db74bbb3d46", 0xe4, 0x8}, {&(0x7f0000000280)="338411d05f40148b274865507db892e41a5fdc499dc469edac0a3de5e2c04018950191286bb99043c288eb4d9490a9e4b59373f9936159bcc359aa7d151d3f60b0fd974ab73d7a396b6e783cdd3e828da09e082d22866321e992358a38e004c71bf0d09d0066b9f8", 0x68, 0x3}, {&(0x7f0000000300)="04878f1011810af8f47ec455197461", 0xf, 0x6e72}, {&(0x7f0000000340)="1ded2820c2435efb09c9d379a40d4c7363af940046c4451c7c00d78267e7c79ee2647f5187e64e29af42eec46c3ccd1dfcd42535832f11fb44886042414bf77b133249a6aa8c77d392f34e39e799aaa0fad579a57ea09f4931c926ab335f16e6d39778bf81f7c1bd388531", 0x6b, 0x2}], 0x2000000, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000500)={0xff, 0xf67df54, 0x8001, 0x7, 0x1000, 0x9}) 18:30:40 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6c579e3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000280), 0x400, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000680), 0x721, r1}, 0x38) 18:30:40 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @remote}, 0x5, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='macvtap0\x00', 0x10000, 0x9, 0x3f}) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:40 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$ax25(r0, &(0x7f00000000c0)="4cbc055ea0e09f724a6bf22d1dc72893f3158386fb82ed36f8ed1d5789b0a1297a2f7396865e635e2d2670773566fd4f7457d2b17502a008e25d02e6", 0x3c, 0x20000001, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = fsopen(&(0x7f0000000000)='xfs\x00', 0x1) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) [ 317.887580][T11750] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.897252][T11750] net_ratelimit: 134 callbacks suppressed [ 317.897267][T11750] netlink: zone id is out of range [ 317.908305][T11750] netlink: zone id is out of range [ 317.914306][T11750] netlink: del zone limit has 4 unknown bytes 18:30:40 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80000) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 318.094052][T11750] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.103739][T11750] netlink: zone id is out of range [ 318.109188][T11750] netlink: zone id is out of range [ 318.114373][T11750] netlink: zone id is out of range [ 318.119788][T11750] netlink: zone id is out of range [ 318.124945][T11750] netlink: zone id is out of range [ 318.130263][T11750] netlink: zone id is out of range [ 318.135417][T11750] netlink: zone id is out of range 18:30:41 executing program 3: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000000119050301000008000000027d0000240001001400010008000100ffffffff08000200ac1e00e70b0002000500010000000000240002000c00020005000100000000001400010008000100e000000208000200d58dd400080007"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x2e, &(0x7f0000000200)={0x0}, 0xb, 0x6000004}, 0x0) 18:30:41 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x75, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=""/117}, &(0x7f0000000040)=0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:41 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x800, 0x5e) openat$rdma_cm(0xffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:41 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 318.636243][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.723058][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:30:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100), 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:30:41 executing program 2: r0 = open(&(0x7f0000000040)='./bus/../file0\x00', 0x20081, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) readahead(r0, 0x5d, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='SMC_PNETID\x00') getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0x200, &(0x7f0000253000/0x1000)=nil, 0x4) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000026ea9d9b9c5e96fb794f8f2757314500", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf25040000000900030073797a300000000014000200697036746e6c3000000000000000000005000400020000001400020067656e65766530000000000000000000140002006873723000"/94], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 18:30:41 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r1) write$binfmt_script(r2, 0x0, 0x0) 18:30:42 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x680, 0x0) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) [ 319.167853][T11797] kvm [11793]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 18:30:42 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:42 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x7, {0x7}}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) fcntl$notify(r1, 0x402, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:42 executing program 4: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000007c0)={'filter\x00', 0x1000, "a9ca222cbba406a1074ab0c45067452f9599655c21aff5fa48611786618da286cd8eacd095fa21592ad8ac9a88a7a4265b6b94afeb094b79fadbc0569ccc42c268e3eb85c8221ff84a309cc4b13c4390dfaaa090e72e2499dd79568b0cd2dce7f016dc4557af4fd10e44e9d3b946cd5c421f9e3849336c0633822004756d09913b4e0b108467c856d5949185b1dffc50647bdbcb773dbae5bf74154bf3c3471fd88ef61b9c35f4380bd89a3ad5fd806cb61fa230333b1ce91ce891e4633e0e312747ded7ad217f2aeac603ac42cd2b4859d03862e408f9b3590188845256753d31f9c223e6ba0a09c330c106c9a67c01bf5efd27cf39128269f819ae933bf44b2e545e831df121b5af6d763beead15cac2b896f40b7a0213624065d4ac71ffea401b41d1ce90131a99777e9f4835150b505b4cacd1fdb047f0e6b9a51c1df11f153d01fe1f4bc915d10244f9ed16ae9c3a0378b286093efbbd7768bf6f4e756edef786919d0a37ad9fb212ff5e35f1f595f5a43551f85c5614d18bc01b3680c2238b28bc90e53aeb54f7228aad693c6644c96cedeea8f6971c5c21ecc8351cd7a20cd0863bf9f0be161cf33201c2bc531ae89e2bc569ff88196a0d1b3a26e00e0100fdee3958a4bb6116d56f6596b59eae3f182c4556f383f9caac04abb742b395bd7d3dedfec0f3ea7a05cbab579394d68e40ca5f0fa15c1bcdb7b6a2d135919acc008873c7133f486184a2dceb37db07801c86ff5f890da413cd435349d54cfdf07d098f0a4a0037844797b7c8ed66143a80c199bb74f96370c312bf9eafb6df60351a2b34252e52291490102efe6be4293ce1543c9f6b69089c34b245c258675d3034568dab45456e3bb827b47d0b084454a84093057f0eb638748d00bbbe8342c53a307351862ec06b1367c05ddb2db73b14c6db5f35c6154dbf57f02ba4492f4e350f0da141c8b921d3290cc6fb82439db7b56092cd376ca8ff04dda9ad6af72df5da143b0ecd023dc7610782222d9f394622a65ed83d821a4adc6e27f0ecba509c940dacc9188a505de3a707a62e7089f57ba8e48068ffc6f98ef2776c22cda9dc005447ad35b6088db4233eebb13cfc34c490b12f27d946e8e1eb1c5f22e657caa87f8a74d4a8c010107f922e1d3553621189bea401c00899ed2d051f5fd65e677ba4c4382a24768cb83b9f6e14dd8805543eb78e276bd7a7cb057a2dc042ad5ad275f14fd9df438ae2c70f8410fd513cae59a00e86ab42e829269fbe264915223854ad9ff78d5681a9a30b0c1acfef9738e1ba416de766873159df72192fb55a608ff131370b0f3ad5058c66a8c1e1d53f4e095fb8317990219f7ba5f309d43ac2ec0d327f4a6c0635f6d23fa30f2c7eed366b4fdf58c259fde2c9a5ae565cc92b5c91b3cf600dc8b419d56bb959a73e458ba5c9263a771993ff7faab3fff6c5ee6b66fa9c5b31c7bb4b469154c0f86e4600dc611742d142b4943140ecae2a368c684b1245fd49ab7e9789cb9f3b129d209b03833f80ac6bc7533227ec9a724160d17ca81f068bb3f181c1dbaea0a1bd761d00e005e2db195eeecd393a1566fbcd677dffefab0eb49203e082adddc9acba5c839663a62296d3b8140c758e07e147f959d792cd42fab0178db3f8a70aaeddad4d110fbaa0151f5959eb6c4fea1acc5d100d6b817876b62fc5c39c56100a9700fb5a39d33fc17f975ef3c3d9f53863ea944ecdf4e9a0449eaa83e947b114cec86c1be9b8bef907f1b45682684a5df23ebd9a0f4b6c2a195abdf75de96a22a58b9158c81d1f64b8e0be1e9b088fb74ce7cc6e83470da0255afb02ed50b7ac2581389e67455b36a465f9b18882b5d283810ea9645509334937b75ee025f54ddcea4189956048261aa6887685efd8a6aacd651b0d90de8f13cff961977590ede94451e4a8e5ff1aa668ede3a8577ca212beca35960e708f3c9dd97e75374a2a8c7e96a5d93594f09faf62036805a7712c44d1573e23b7331665e63141c8f0186a059e5b979b663027b536ed8a570e8652a2e5783686475850bfc76ec8f5553e5883ec37784229437b305c850649b0e27f894fd4397c5d22888f1c6ff11516a49203f81afa10dd13c7e45cd0ccfe6ae9687c6763a93f3a689c13fdcf267100823fac802a8276d29d84f8cdd7271344cab296bcc963d857f469454667e07ddece055546859ffdd72e3fa0ffee0bc28b7a9832b3b8e8d34c902c77a49cc0b501a309efd0ed0127ae061513dc65b53cef21aa6e9d11e9a228fc40ef1242d02c2e1e314f978c5585a9728f9379ad608e3b7e594f3fee40daacbb65ecfa41a4a1c6c2a2ef1fe278685024236dddc62da06dd693d791dca222e11387287a013f7aa2c70d2fc710d8ea8f7e86488dd3ccb40951eae6aebd61234f58b1e991e48d2c1584a35383eb5a11a0a5461ef802842ef122a6d582dce386f6bc465cb20a62d0f66a3e031fb37b5c1331da9d9b91fdf8f65d9eecdb8be73d0a8e2a55975578d7ac4897b68d771e49545ac1f6fe6a1f118ccce04fb9ebacfaed89cc49bc692d371ddbcaadf0f59ca399d78cc8390a41d6b541b999a4147a889d1ccde924e835bdd75942044e9c71a7cc5382e1ce26050a13f3e1c689e0386e52c761d30b3a4f205e94ac3cc6662e0906e1dcfe0ead4b5fe47a06fdbd1ad46326cfcd8a9567fd173a60ff92eea6349b1051205f9e83c45a744a43b0988437819b9a5bdbccbdec23ed4ac1d461263dea48fcb9109f00f117204c95734ad5a0b77aa24e80a924485ca2f3963ccb57a2613df5c09fcd393c09ce27436e8919facaa1dc42209d6e3ace587da03d7b5b127777966ca9601b0f0a4123ae0f5a5dd6328f2997c1cedd5aee1160633c4772274e6d3244614222ad865dffea7d2fc4fe65a1a5198965c65f7450e54fcc86322ed63d69b929cfc3b3dd199d651a812a72fac62267a9372b20577b4845b1b49e24589b65002abaf1e7a0a740d5a968f7dbab1069667fb0f598058d52a062f10c560b0bd6c02eaa324d94eb112b68052a3e86fd70272365ef2a292eead04d835c17ab91666fcc78a12a8991d393b34ad779802b3dc8c5fb5f39c5fd7d3a149e9aabe588b1ad384082f9db4497b85fe64ac866e688ebcb526f2d2036519c2cffa05a4a2a0a35c82d0ab383dbfb43d52b0b314e1ca2e2bbe071db03cc7116635001824befc54a20e7cb0fa8a5eb5532191d7ef48afebfe7aa9f95b1d24e527520334865b1167225949b92643ffb4711faa89676a61f1bd546cf4ec20b01526d6889d59e0be8c3118be9f45196f6bbd2a969b9249384c56c333293aa4858a084cefc86862ca0bf033a352416b41934203d9bdb2fe6c6ba987f33c893e83ef7632187403005d16064e9cf0624d26da15a4d9d064494d81f7c97d8696b6fb6be1b5da1cdd85e8a38602ea7c5e06be7847461fde5b5c85f5094b5ae5e01e3d4d8e14fbb7f46d4ae1e97ec006a4cb9de44c4f4d708fdacea85b97290a2586ff0d37fc61453ce47c387fa799dcf119b3c4f5a47d3048119f794cb2f2b22eee4db8d317b5fa6429f3d01803ea5cb4f4e1022afe788831de54ba017ddd3eefcf266c0b6585607c6f0440e5ee79cb6b5fe67c29d4bc1eac308ff971c49ddf73457d63713699c0ad36c67bee80f82d91dea4e70db876354777b4e096180c6b84dce3733362ebbe130bbff2d2587433cd5cdf667fbe1a42e16afc3628ee09523357718567b9364e949612a27fcba2db92693d3bb26271fece2d61e5bc52b49435709223a288c7b7443ad4e01ef404bb58308d4d04046d09b93fac533708c4efe4128b09938138656811ac9890b859c4e0542b87d41d92b668fb03a2dcf8c8406f79f594035d04be214d36d182febc0248d6a9a58d8a9059b513e6fe7ede9a4c7fefb6b89d2b75e7f96e789c40d6c5ab5b4c1778ed708f5dfd2806802fde0776bc8cc8924c14a936d0ccf9383e09ad7ae3294abc6a60021bcee4fdb0f61cd14bdec079a94c13da50b15cd3ec7c526fd61d32f9aab621e9beb27754e229f59ea86a68f01b1c1dc09ae433cc66ef02c8f6e5d3823694d53acaf6b2e7ae6d8c51cf40e241f6c882f2a0adf2c22e9f72972f96330bf2a502429db90697c006dcc09efc528e54124b0fdbdf7cb9a30e7af209ada4dc4f5e39245a007c873ba3521d4f5fddba9599e3ccc56c834bac86ea5b065b35b5cd0d6d4efb53c47d461093e4e303743391c9fc81a5b6c61109f179f93a9d86441b38ed3d68f77ecf3e9b008552b944428b6b67a76ddfadc77cf1594af8432e580e0ead09c1447f5371d79bbca5c98889a59dd93873bb3809fffeefd4ac424a7104d199853901af6544cf6713d301e23682a8cbb54f004b2d7d589fe9d26592856f4db954227250c6109f7f049eb46aebccb27c1c5dd8a6477cf61452539d5b7b2b199496027938fdcde4cc31a8c61c4f9dac2a35b739faf3dd8ce757bd2f376e6bcb7491aed13dfc43e32d421a7513968d293ed2efc47f828650ff0a627da1498c1c98704743946d4fbb0ad676e691280fa239f73755b06f59942785ea9c2f443a53b436be2068c9648a903c9e5ddcbb2d8643bbe3917676fd11c36f774c30aff5f43beb4fc328abcd6cb61e2eab2fb9f69400a471a3dc6eee22afcbdd833681468fc871609d7bf0fe75b6392f0ade27fb8f470261e2e117e43a3160acf9e5106db3208fa16eceeae6e8c730441637ee8461d647b6764870f8438b795cb9ab97c40d39156a62e739ac4bf2dc59b21c4b229ab3a14d80eaed06e7551a5fdadbd3c94d41ca1985ef36774afd9b0ee065edb73fb2cb76cf72712bd7823714d200c8a9fdbe36049c37bbf9fa6e23268da8d0aa7fa5d552fba51a689653036f4d6ebe5cbf12ed85572951ac7bff9774db7dcc55a9ed23548b1ffb4c527401bc5a78d7cce4ed04fdfa4d5edcd5e5f6d6dcde261ccd4654e4b0f28758d721cfd2d169cf502fc8d164ea29467dd9d2626bd9da94c240f407cacc8ccbaa386ecfcbd3777f082fb85aa4ee2b0802304fef1bbb4ddc2b3a5c9ddde3e91887d8d0bc9454c0ab3568ce326636503728781f1474213d76da5a34c646678fd8ec60d1f1cdda6a4327719f4f4f3535871c08c8de2290fc26f33bb4a6e5082a643af586fb1f881a2a59cfa484e5ccd46cc4a2a40ad3d8547161a275c585419fdf35672fa9dd59617acf40c4fbdd1634b73092eb5548f708836175b2fd365fc9a51489d44088b913182e53c3c847a3c1c5b9d79ae1c7ca292b70c8cb70c63bae9657c0ce4334d04698d5fa3fefac9d78ede008842cc7c8aa0673e71a944ef8fe2aebb42d93160e3b49e1815ee53612ad366a86293c34e667e6f89f02b8a5d46caf976cd444d00d1366a15ab14b5b6f29cc76b51ee5a65d0b87213226ffa0655d749c29c62a8b4b0f782fdf710ace36ad4da328157f1a611fee218914b1c3dcad5d48fbe79660b4c1337b064584996f134d35927f00acfd8460e7281600e31b9423a9cbc4a661692232b6cbad1544610928e9f13eb5f5edb005a990d21667d6d4c896f60350f4c8e8b22482222734443c86b7fc9773c01547e5dc95987b6225972d0acc0c380ee49edc90aa8b1d602d9965e117563df2a50435a2e1f511593290c8bd1ef1facc93ade278c282e4f6a57215e1555bdd239abdfdc898b5a6bf1f0ea4c5624fa90ed89153f4222d2f3076a4e81559e75420ceeed5c99766b1e0db3d05cccd89988993a4b4960b7c981fcf36192b870459104dd979008e8e15d66b6a762efac6db4"}, &(0x7f0000000100)=0x1024) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)=r3) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r4, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r4, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', r6, 0x700, 0x7f01, 0x3, 0xfffffff7, {{0x38, 0x4, 0x2, 0x8, 0xe0, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xbd, [@empty, @private=0xa010101, @local, @remote, @empty]}, @generic={0x89, 0x4, "b472"}, @timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x7, [{@private=0xa010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x987a}, {@empty, 0x10001}, {@private=0xa010102, 0x2}]}, @cipso={0x86, 0x45, 0x3, [{0x5, 0xf, "f5d6c711e69d0d4a5d9cf472c7"}, {0x2, 0x11, "ab9f877d70d51dacd530d08b762381"}, {0x2, 0xb, "8b2f1d83f81cb22167"}, {0x0, 0xe, "2cce6947d6efcfaf434a6d42"}, {0x0, 0x6, "71509283"}]}, @ssrr={0x89, 0x1f, 0x2d, [@multicast2, @empty, @remote, @empty, @loopback, @multicast1, @remote]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x7c, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@broadcast}]}, @noop]}}}}}) 18:30:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="900000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="db80833c00000000680012800b000100697036746e6c00005800028014000200fe8000000000000000000000000000bb080007"], 0x90}}, 0x0) 18:30:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = openat$mice(0xffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x400800) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x20}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mouse_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0xffffffffffffff8e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r5, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', r7}) [ 319.837767][T11824] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.937698][T11829] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.978020][T11832] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.007584][ T32] audit: type=1804 audit(1595269842.943:75): pid=11831 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/46/bus" dev="sda1" ino=16158 res=1 18:30:43 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000000)={0x0, 0xfff, 0x0, 0x16, &(0x7f0000581000/0x2000)=nil, 0xfffffffd}) [ 320.082613][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 320.092119][T11835] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 320.280068][ T32] audit: type=1804 audit(1595269843.223:76): pid=11840 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/46/bus" dev="sda1" ino=16158 res=1 18:30:43 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x80000, 0x2c) madvise(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x65) madvise(&(0x7f00000f8000/0x2000)=nil, 0x2000, 0xa) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="dee7030022cf9e5e1dbac67b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce00000000f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="3b5c0a3401a3daf9f1941132d7aa2ed1f26331bc2289b5ef001f139bfbc8ebb727014838b5d3807e674cda1b1da67ab1c1c33604bdcb3c601ae13d98c25aa66327855ec23b6045d081bff4bd48d866515da91209cef700613f62e9bce4eb98f4a2c6e67e5b81da2daa898ce84eb1e6a938fe9e6ad9106f1d56ae834146584fc152ab64eb9e8709378ce8e620e4b3e7325c6d", 0x92, r1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r3) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r4) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) keyctl$link(0x8, 0x0, r4) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="dee7030022cf9e5e1d9ac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab01809c2499ff71be24b50c3362201a307df03000", 0x7f, r4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="3b5c0a3401a3daf9f1941132d7aa2ed1f26331bc2289b5ef001f139bfbc8ebb727014838b5d3807e674cda1b1da67ab1c1c33604bdcb3c601ae13d98c25aa66327855ec23b6045d081bff4bd48d866515da91209cef700613f62e9bce4eb98f4a2c6e67e5b81da2daa898ce84eb1e6a938fe9e6ad9106f1d56ae834146584fc152ab64eb9e8709378ce8e620e4b3e7325c6d", 0x92, r0) keyctl$clear(0x7, r0) unshare(0x14000b00) 18:30:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 320.493705][ T32] audit: type=1804 audit(1595269843.433:77): pid=11845 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219792501/syzkaller.vgic5F/120/bus" dev="sda1" ino=16137 res=1 18:30:43 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x100000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f0000309000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000049a000/0x3000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) inotify_add_watch(r0, &(0x7f00000000c0)='./bus\x00', 0x40004ed) 18:30:43 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00'}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) [ 320.953403][T11853] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.991947][ T32] audit: type=1804 audit(1595269843.933:78): pid=11856 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/47/bus" dev="sda1" ino=16153 res=1 18:30:44 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x104) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000040)=0x20, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000016e000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000307000/0x1000)=nil) 18:30:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x54, 0x0) sendto$inet6(r0, &(0x7f0000001180)="e4", 0x1a000, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x29}, 0x9}, 0x7a) 18:30:44 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x6a4100, 0x120) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:44 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f00005e1000/0x1000)=nil, 0x1000, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:44 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f00006fd000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r0 = semget$private(0x0, 0x8, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000021c0)=""/4111) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000000)=""/128) 18:30:45 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000040)={r0, 0x4c}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x20000000) 18:30:45 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x5, 0x2, 0x101}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x5cf8, 0x4) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x80000000, 0x4, 0x5948}) 18:30:45 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r1) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="3b5c0a3401a3daf9f1941132d7aa2ed1f26331bc2289b5ef001f139bfbc8ebb727014838b5d3807e674cda1b1da67ab1c1c33604bdcb3c601ae13d98c25aa66327855ec23b6045d081bff4bd48d866515da91209cef700613f62e9bce4eb98f4a2c6e67e5b81da2daa898ce84eb1e6a938fe9e6ad9106f1d56ae834146584fc152ab64eb9e8709378ce8e620e4b3e7325c6d", 0x92, r1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r3) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r4) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) keyctl$link(0x8, 0x0, r4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r4, 0x4d, 0x1e}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'md4\x00'}}, &(0x7f0000000280)="f558c004390cbcffd2c95a9e9b5a63aaac12a9c6ba1d8481e8a6dfb098169ee6cd26dfbc63cbf4be5843958362ee90835d1d343b2940ea2fe0ed8ef0fb508452bec68efab69f5dba8da694d130", &(0x7f0000000300)=""/30) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r6, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x844}, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:46 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x0, 0x70020000]}, &(0x7f0000000100)=0x54) 18:30:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x7}) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) r3 = gettid() tkill(r3, 0x8) ptrace$getregs(0xc, r3, 0x3, &(0x7f0000000180)=""/224) 18:30:46 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) madvise(&(0x7f0000497000/0x3000)=nil, 0x3000, 0x0) 18:30:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000002ce290f8aa136c440f4c1fd536d00", @ANYRES16=r2, @ANYBLOB="f29028bd7000fedbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x8) write$FUSE_LK(r3, &(0x7f00000000c0)={0x28, 0x0, 0x4000000000004, {{0x1, 0xffff, 0x2, r4}}}, 0x28) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x0, 0xe6) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000180)) ioctl$FS_IOC_SETVERSION(r5, 0xc0c0583b, &(0x7f0000000080)) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80104132, &(0x7f0000000040)) 18:30:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="d8f70f20c06635000000200f22c0640f300f20d86635080000000f22d8127500660f38085f97660f698dd2002e3663a66f0066b8010000000f01c1360f06"}], 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x9, 0xa, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:46 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x101000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0x200, 0x4) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x7fffffff, 0x1, 0x0, @local, 'ipvlan1\x00'}) madvise(&(0x7f00004d8000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:46 executing program 4: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000380)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44800, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/252, 0xfc}, {&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000280)=""/103, 0x67}], 0x3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) [ 323.861624][T11919] __nla_validate_parse: 2 callbacks suppressed [ 323.861655][T11919] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.877977][T11919] net_ratelimit: 816 callbacks suppressed [ 323.877992][T11919] netlink: zone id is out of range [ 323.888977][T11919] netlink: zone id is out of range [ 323.895038][T11919] netlink: del zone limit has 4 unknown bytes [ 323.905733][T11918] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.915577][T11918] netlink: zone id is out of range [ 323.920988][T11918] netlink: zone id is out of range [ 323.927126][T11918] netlink: del zone limit has 4 unknown bytes [ 323.970458][T11928] IPVS: ftp: loaded support on port[0] = 21 18:30:47 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:47 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0x100000, 0x4000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 18:30:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf000000, 0x2, 0x1, r2, 0x0, &(0x7f00000000c0)={0xa00902, 0x1, [], @ptr=0x100}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:30:47 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x1000, 0xa0a18577f5840d8c, &(0x7f0000fff000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_newrule={0x24, 0x20, 0x10c7251ebd2e130f, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e21}}]}, 0x24}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) [ 324.625464][T11967] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.635281][T11967] netlink: zone id is out of range [ 324.640671][T11967] netlink: zone id is out of range [ 324.646837][T11967] netlink: del zone limit has 4 unknown bytes [ 324.722992][T11970] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.732782][T11970] netlink: zone id is out of range [ 324.797534][T11974] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.841722][T11971] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.909028][T11979] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.017009][ T32] audit: type=1804 audit(1595269847.963:79): pid=11981 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/52/bus" dev="sda1" ino=16169 res=1 18:30:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = open(0x0, 0x44c142, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/256, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = dup3(r0, r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000001) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) 18:30:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = open(0x0, 0x44c142, 0x1d6) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00', 0x6}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = dup3(r0, r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) 18:30:48 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f00000000c0)={{0x2, 0x6, 0x37, 0xffffffff, '\x00', 0x401}, 0x0, [0x7, 0x5b, 0x8000, 0x2, 0x2, 0x10001, 0x3d76f87d, 0x1f6, 0x401, 0x3, 0x8000, 0x3, 0x3f, 0x5, 0x7, 0x4, 0x3f, 0x9fe, 0x4, 0x81, 0x5, 0x9, 0x3, 0x7fff, 0x6, 0x200, 0x6, 0x81, 0x9c, 0x7f, 0x8001, 0x5, 0x2, 0x0, 0x3, 0x5, 0x1, 0x101, 0x84b5, 0xfffffeff, 0x1f, 0x1, 0x5, 0x8, 0x48, 0x4, 0xdfb, 0x9, 0x7, 0x4, 0x4, 0x64ee, 0x200, 0x0, 0x2, 0x5, 0x1, 0x3ff, 0x6, 0x9, 0x3, 0x101, 0x101, 0x1de414b0, 0x8, 0xaa09, 0x9, 0x2, 0x4, 0x77cc2809, 0x0, 0x0, 0x1, 0xdfa, 0x7, 0xfc0, 0x0, 0x1f, 0x1f, 0x2, 0x3, 0x5, 0x8, 0x758a, 0x144, 0x80, 0xd09b, 0x22023dd6, 0xd85, 0x4, 0x4, 0x5, 0x2317, 0x180, 0x8, 0x1000, 0x3, 0x0, 0x0, 0x6, 0x7fff, 0xdd0, 0x8f7, 0x7, 0x4, 0x5, 0x7fffffff, 0x8000, 0x1, 0x1000, 0x4, 0x6, 0x80000000, 0x2, 0x7, 0x1000, 0x8, 0x1a, 0x7, 0x1000, 0x200, 0x9, 0x7ff, 0x2, 0x0, 0x2, 0x1f, 0x9]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:30:48 executing program 0: socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="0a48000036000535d27280648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1, 0x0, 0xfffffffffffffef5}, 0x0) 18:30:48 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b07073900376d"], 0x40) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/117) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) setgroups(0x0, &(0x7f00000001c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001180)="e4", 0x1a000, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x29}, 0x9}, 0x7a) [ 326.129656][ T32] audit: type=1804 audit(1595269849.044:80): pid=11999 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219792501/syzkaller.vgic5F/126/bus" dev="sda1" ino=16183 res=1 [ 326.156259][ T317] tipc: TX() has been purged, node left! 18:30:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) 18:30:49 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = gettid() tkill(r0, 0x8) get_robust_list(r0, &(0x7f0000000100)=&(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000040)}, &(0x7f0000000140)=0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) socket$inet6_dccp(0xa, 0x6, 0x0) 18:30:49 executing program 2: syz_open_procfs(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@usefree='usefree'}, {@fat=@gid={'gid'}}, {@fat=@uid={'uid'}}]}) 18:30:49 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x104) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) [ 326.684546][T12021] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = open(0x0, 0x44c142, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'geneve1\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/256, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r3 = dup3(r0, r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000001) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) [ 327.090425][ T32] audit: type=1804 audit(1595269850.034:81): pid=12033 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/54/bus" dev="sda1" ino=16187 res=1 18:30:50 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r1, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0xf00}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x48ad8f01e7eeda55) 18:30:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) waitid$P_PIDFD(0x3, r1, &(0x7f00000001c0), 0x20000000, &(0x7f0000000140)) 18:30:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)) 18:30:50 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r2, 0x821}, 0x14}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r3, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r5}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r6, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r6, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r8}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}}, 0x1000c004) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:50 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x23) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, r2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x23) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r13, r11, r9) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="2a9856436c82e531b596233565959cad8e4aec635690f99bec4c07a3a151783a13f99727c384e981692b78abd5defd96bd28a655ba3ce9c825fc1f1da6f5da09", 0x40}, {&(0x7f0000000100)="6f9091778aef1f4818cc85184e348934113b00eff9c7b60a16c38448b1745f7b2c428f33fc696f51", 0x28}, {&(0x7f0000000140)="1040381b766aa06ebb4c42d00c0ebbaaec917fe4e80e79dbab68e1ff52f7108908bd352e75ed70cf2f9cffd53600778befaa8748599d83247278a64da47d42ffecda303d3b52aee4b5a1102d055ea775d7c017da9ad0a5be335a63", 0x5b}, {&(0x7f00000001c0)="b3aa66f090975afded2c32d23ea3247c8de0e6058f05705f3c1a81f67009980e9c0c4c82874a899a29c3226259d9853bf4a1fd510bd5b394a4083a3d379f37551c3eba80cd2ebcd48102acb58bd624c8ee7aa4d3b372ea63b3893fa5357fbc125ec745332ca898be77bd1971c91a087812d0628677e4058ac1d5c803b46e62f58b17a12732d9619169d560c18f602e11887544d177e3eef7f04b8d9eca", 0x9d}], 0x4, &(0x7f0000000440)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x18, 0x1, 0x2, {r5, r7, r13}}}], 0x48, 0x4004814}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 18:30:50 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 327.721262][T12050] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:51 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={@none, 0x9, 0xfff7, 0x81}) 18:30:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000140)={0x9, 0x80000000, 0x80}) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc00c64b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x4401) 18:30:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, 0x0, 0x0) 18:30:51 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r0 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='posixacl\x00', 0x0, 0x0) 18:30:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x94f8147a408fb7f4, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1410, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044880}, 0xc8b20aaf4b1f8f90) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:30:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xef12}) write$binfmt_misc(r1, &(0x7f0000000b40)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 18:30:52 executing program 5: creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f00000004c0)=ANY=[], 0x15, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x39, 0x0, 0x0, "ac23a160780f365bf3d0167e07d25c70", "0cb1ceb9244a8050ff852d5391e82ca6649b87e6c9b1032b7546a1deca75683b7ebf855a"}, 0x39, 0x0) 18:30:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 329.495260][T12102] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.504885][T12102] net_ratelimit: 17 callbacks suppressed [ 329.504901][T12102] netlink: zone id is out of range [ 329.516108][T12102] netlink: zone id is out of range [ 329.522073][T12102] netlink: del zone limit has 4 unknown bytes [ 329.560360][T12105] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.570430][T12105] netlink: zone id is out of range [ 329.575752][T12105] netlink: zone id is out of range [ 329.580908][T12105] netlink: zone id is out of range [ 329.586145][T12105] netlink: zone id is out of range [ 329.591296][T12105] netlink: zone id is out of range [ 329.596528][T12105] netlink: zone id is out of range [ 329.601743][T12105] netlink: zone id is out of range [ 329.767909][T12102] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.792098][T12105] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0, r2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x40, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ca}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x1240, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x804}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x10fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7c630c86f5378de672865ba126d287aa7caa7a007c"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "e818b461fc85c631aca0c9d539665af4684c42d4ad867f3304915a5aff9af8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "621f88d63ca48867d5846304c706f4dbe148f2a6a688a65925b981450b6593f8e8"}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x6c000804}, 0x8800) 18:30:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.652932][T12144] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.783433][T12144] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:53 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f00000003c0)={0x9f0000, 0x4, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x9c0904, 0x8, [], @p_u16=&(0x7f0000000340)=0x401}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r2, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r5}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, [], 0x1}, @in=@private=0xa010102, 0x4e24, 0x8, 0x4e25, 0x4, 0xa, 0x20, 0x40, 0x6c, r5, r7}, {0x8, 0x3, 0x8, 0x7, 0x7afd, 0xfffffffffffffffb, 0xffff, 0x7ff}, {0xfffffffffffff800, 0x7, 0x3, 0x6}, 0x7, 0x6e6bb6, 0x0, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d4, 0x19}, 0x2, @in6=@mcast1, 0x34ff, 0x1, 0x2, 0x4, 0x7fffffff, 0x5cb, 0x2}}, 0xe4) 18:30:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.963104][T12152] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:54 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x80041270) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x24040091) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0, 0x24) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clock_adjtime(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xb880}], 0xa, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x104194b1432d0209}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x4080) 18:30:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket(0x11, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000f80)={0x8, 'macvlan1\x00', {'ip6tnl0\x00'}, 0x7}) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r4, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r4, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f00000001c0)=@deltfilter={0xd34, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xffff}, {0xd, 0x2}, {0xa, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xbf1}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}]}}, @TCA_RATE={0x6, 0x5, {0xc8, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc88, 0x2, [@TCA_RSVP_POLICE={0xc84, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x438}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1000, 0x6, 0x9, 0x8001, 0x200, 0x1f, 0x5, 0x20000000, 0xfff, 0x7ff, 0x6, 0x0, 0x1, 0x4, 0x3, 0x2, 0x2, 0x8, 0xfffffffd, 0x5, 0xf37, 0x3f, 0x2, 0x1000, 0x9, 0xc0, 0x0, 0x5, 0x5, 0x5, 0x400, 0xffff, 0x7, 0x20, 0x3f, 0xfffff52f, 0x1, 0x100, 0x1f, 0x0, 0x3, 0x1, 0xf149, 0xf7, 0x8, 0x7fff, 0x2, 0x10001, 0xffffff80, 0x4, 0x4, 0x5f, 0x1, 0x8001, 0x0, 0xadb, 0x45, 0x4, 0x3, 0x0, 0x40, 0x100, 0x5, 0xc937, 0x0, 0x7, 0x9, 0x1ff, 0x6, 0x3, 0x0, 0x1, 0x8, 0x200, 0x6, 0x4, 0xdf41, 0x6, 0x7, 0x8, 0x8, 0x2000, 0xfffffff8, 0x3, 0x9, 0x3, 0x5, 0xffffff80, 0xff, 0x3, 0x7e5, 0x0, 0x64, 0x20, 0x9, 0x7f, 0xea, 0x9b, 0x3, 0x9, 0x8, 0x9, 0x20, 0x80000001, 0x10001, 0x200, 0x7, 0x81, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x4, 0xd0c, 0xfffffffb, 0xffff, 0x101, 0x9, 0x800, 0xc2, 0x0, 0x4, 0xffffffff, 0x80, 0x5c2, 0x6d, 0x2, 0x7ff, 0x3f, 0x100, 0x7ff, 0x1f, 0xfffffff7, 0xfff, 0x5, 0x100, 0x3, 0x3, 0x6eca, 0x8, 0x3, 0x80, 0x800, 0xfff, 0x74fb, 0x1ff, 0x7, 0x5, 0x3, 0xcf, 0x8000, 0x2, 0x7, 0xff800000, 0xd10, 0x40, 0x9, 0x0, 0x8, 0x5, 0x79cf, 0x5, 0x5, 0x8, 0x7f, 0x5, 0x591, 0x5, 0x0, 0x8, 0x78ea, 0x2, 0x3ff, 0x9, 0xede0, 0x8d48, 0x4, 0x2, 0x8, 0x6, 0x524b028b, 0x80, 0x0, 0x2, 0x8, 0x1, 0xabb, 0x81, 0x9, 0x7fff, 0xacb1, 0x2, 0xfffffe00, 0x5, 0x9, 0x3ff, 0x80000000, 0x0, 0x5, 0x0, 0x80000000, 0x62978cc, 0x3, 0x0, 0x1, 0x8, 0x2, 0x8, 0x1, 0x74a8, 0xfff, 0x7ff, 0x1000, 0x1, 0x80000000, 0x6, 0x0, 0x7fff, 0x400, 0x33, 0xfd, 0x7ff, 0xfffffffe, 0x1, 0xffb, 0x1, 0x8, 0x3, 0x400, 0x3, 0x7, 0x1, 0x3d77, 0x400, 0xffff, 0x7, 0x80000000, 0x233, 0x1000, 0x4, 0x2, 0x401, 0x1, 0x5b97, 0x9, 0xfffffffa, 0x1, 0xfff, 0xeac, 0xffff007a, 0x5, 0x1, 0xaf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0xc4, 0xbe0, 0x10000, 0xe9, 0x1, 0x3, 0x0, 0x101, 0x7, 0xffffffff, 0x2, 0x8000, 0x5, 0x100, 0x9, 0x2, 0x9, 0x5, 0x3d, 0x5, 0x40, 0x7, 0xfffffffa, 0x5dc7, 0x3, 0x401, 0xff, 0x14, 0x2, 0x0, 0x5, 0xff, 0x100, 0x6, 0x4, 0xffffffff, 0x3, 0x1000, 0x1ff, 0x9, 0xffffffb6, 0x8, 0x1ff, 0x1f, 0x9, 0x4, 0x4, 0x2, 0x8, 0xc13, 0x8001, 0x4, 0x0, 0xffffeeec, 0x8, 0x8, 0x1, 0x5, 0x116ca538, 0x3, 0x8, 0x5, 0x7fffffff, 0x8001, 0x6, 0x6, 0x80000001, 0x7, 0x6, 0xffffffff, 0x2, 0x0, 0x80000001, 0xfffffffc, 0x1, 0x1f, 0x3, 0xfffffff9, 0x100, 0x3, 0x0, 0x1cc3, 0x2, 0xffff0001, 0x36, 0x6, 0x2ebf365b, 0x7, 0x3f, 0x47, 0x27f8a1c4, 0x101, 0x6, 0x400, 0x1000, 0x1, 0x3, 0x9, 0xba, 0x7, 0x4000, 0x7, 0x9, 0xfffffff7, 0x8001, 0xff, 0xc4, 0x95ec, 0x6, 0x20, 0x80000000, 0x80, 0xfffffffc, 0x6, 0x8001, 0x5, 0x200, 0x1, 0x53f3, 0x0, 0x80, 0x9, 0x0, 0x800, 0x7, 0x8, 0x1, 0x537, 0x3, 0xfffe0000, 0x9, 0x3, 0x2, 0x259c80, 0x5, 0x1ff, 0xe23, 0xfb0, 0x6, 0x40, 0xff, 0x7, 0x80000000, 0x4818, 0xfffffc01, 0x25565e96, 0x5, 0x2, 0x3, 0x7f, 0x9, 0x1000, 0x9, 0x5, 0x6, 0x8, 0x8, 0xcfb61c1, 0x3, 0x900, 0x3, 0x1, 0xff, 0x7, 0x2, 0x1, 0x0, 0x2, 0x88b, 0x6e, 0x101, 0x41, 0x1, 0x10001, 0x6, 0x40, 0x0, 0x1f, 0x0, 0x5, 0x40, 0x1, 0x5, 0x800, 0x3, 0x1ff, 0x3ff, 0x1000, 0xbf4, 0x4, 0xfffffffe, 0x3, 0x0, 0x3, 0x1, 0x7, 0x6, 0x5, 0x80, 0x1c3516e5, 0x9, 0x7fffffff, 0x9, 0xe42c, 0x6183ea2e, 0x5b, 0x1, 0x9, 0x1, 0x3, 0x4, 0x7fff, 0x3bb8, 0x8, 0x2120, 0x7, 0xfa, 0x653b, 0x2c4, 0x8, 0x6, 0x5, 0x8, 0x27, 0xef, 0x81, 0x3ff, 0x100, 0x34, 0x9, 0xfff, 0xffff, 0x0, 0x393, 0x40de, 0x3, 0x2, 0x6, 0x3, 0xffffffff, 0x6, 0x7, 0x1, 0x9, 0x100, 0xfffff801, 0x6b, 0x80, 0xa06f, 0x9, 0x80, 0x3ff, 0x401, 0xff, 0x12917c1c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5086, 0x1, 0x0, 0x2, 0x4, 0xf14, 0x1, 0x80000001, 0xcc5, 0x2, 0x0, 0x3ff, 0x5, 0x5, 0x5, 0xb2, 0x5, 0x9, 0x9, 0xbc4, 0x1, 0x80000001, 0x3, 0x99, 0x80000000, 0x3, 0x0, 0x9, 0x3, 0x2, 0x4, 0x8f70, 0xfffffff9, 0xffff, 0x1, 0xfffffffd, 0xfffffff8, 0x0, 0x52a6cd24, 0x40, 0x200, 0x80, 0x7, 0xffff, 0x6d23, 0x10000, 0x8000, 0x20, 0x5, 0x7fffffff, 0x1b0e, 0x4, 0xff, 0x3, 0x401, 0xffffffff, 0x5, 0xff, 0x6, 0x1, 0x0, 0x2, 0x5, 0x2, 0x1, 0xfffffff9, 0x4, 0x4, 0xb20f, 0x859, 0x1, 0x2c, 0x8001, 0x0, 0x6, 0x5, 0x400, 0x80000000, 0x56a9, 0x27b, 0x100, 0x7, 0x3f, 0x6, 0x8, 0x3, 0x8, 0x0, 0x9336, 0x40, 0xfffffffc, 0x3, 0xfffffffe, 0x10001, 0x55, 0xa44, 0x2, 0xfffffffc, 0x7, 0x7, 0x1, 0xa1, 0xf, 0x7fff, 0x4, 0x3, 0xb7, 0x0, 0xb7dc, 0x0, 0x100, 0x0, 0x4, 0xfffffff9, 0x101, 0xa703, 0xffffffc1, 0x40, 0xfffffff7, 0x80, 0x10001, 0x6, 0x4, 0x400, 0xffffffff, 0x7fffffff, 0x8, 0xbf, 0x2, 0x4, 0x6, 0x7, 0x5, 0x7ff, 0x200, 0x5, 0xfffffffd, 0x7fff, 0x10001, 0x0, 0x80000000, 0x0, 0x7, 0x100, 0x1, 0x4, 0x20, 0x200, 0x4, 0x50db, 0x7, 0x0, 0xffff, 0x1, 0x6, 0x3ff, 0xffffffe1, 0x1, 0x7, 0x4, 0x3f, 0x80000001, 0x73, 0x1, 0xfffffffd, 0x401, 0x4, 0xffffc56c, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x10000, 0x2, 0x80, 0xffffffff, 0x80000000, 0x3, 0x0, 0xfff, 0x4, 0x7, 0x7fffffff, 0xec, 0x2, 0x6, 0x8001, 0x7ff, 0x100, 0x1, 0x6, 0x7, 0x3, 0x7ff, 0x3, 0x1000, 0x9, 0x9a65, 0x2, 0x80000001, 0x7fff, 0x85e3, 0x4, 0xfffffffe, 0x9911, 0x3, 0x48b, 0x8000, 0x0, 0x1, 0x6, 0x2, 0xf0, 0x24, 0x6f5, 0x9, 0x9, 0x8, 0xfffffffb, 0x6, 0x1000, 0x7f, 0x1000, 0xbfe, 0xe2, 0x200, 0x2dc4, 0x0, 0x20, 0xff, 0xca, 0x7, 0x9, 0x0, 0x10000, 0x95, 0x1, 0x0, 0x6, 0xfba, 0x9, 0x0, 0x4a06, 0x1ff, 0x0, 0x8, 0x2, 0x80000001, 0x101, 0x0, 0x3, 0x7, 0x2, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x10000000, 0x5, 0xfffffffe, 0x5, {0x7, 0x2, 0x80, 0x400, 0x20, 0x80000001}, {0x0, 0x2, 0x80, 0x3, 0xffff, 0x6}, 0x1, 0x4fc3a6a1, 0x10000}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0xd34}, 0x1, 0x0, 0x0, 0x10}, 0xc041) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000001000)=0x7, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:30:54 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x224a01, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.725416][T12183] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.810726][T12183] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.152579][T12183] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:55 executing program 4: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x300}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc050}, 0x40) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./bus\x00', 0x6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r2, r2, 0x1f}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000140)) mremap(&(0x7f000042f000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x80041270) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x24040091) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0, 0x24) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clock_adjtime(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xb880}], 0xa, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x104194b1432d0209}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x4080) 18:30:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x10001, 0x2, 0x100, 0x4, [{0x8, 0x0, 0x2d}, {0x6, 0x3, 0x1f, [], 0x1001}, {0x3, 0x4, 0x7e, [], 0x98e}, {0x7, 0x1133f9fd, 0x6, [], 0xa0c}]}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 332.520851][ T32] audit: type=1804 audit(1595269855.465:82): pid=12205 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/58/bus" dev="sda1" ino=16200 res=1 18:30:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:55 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v2={0x5, 0x0, 0xe, 0x7f, 0x40, "3490593e12a1f70931ba9f8567ccc5562c29b7265c9752dc54c289c7e7c5586e1f8b2ba99561eddbca8566a45a7304dcc29fda6f0c5d126290fa556bc071834b"}, 0x49, 0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:30:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) 18:30:56 executing program 4: madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6, 0xffffa36c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ca}]}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2977}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7861}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4e2a4a67}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa5c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "97f9a884a2e18fd975049249322b88e6c2433c156f286b52959854b9bb"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc4d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004804}, 0x1) 18:30:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x80041270) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x24040091) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0, 0x24) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clock_adjtime(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xb880}], 0xa, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x104194b1432d0209}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x4080) 18:30:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}, {&(0x7f00000000c0)="9d831dc51dded297729f7df53cad9a2982980732688460c42ccb067306ffaab916098c278e5a46619cfd1f3c897af329c7aac4abe1b7a17041dfc6bfa2eb05e64b1232ad499ca793b214bf794ea672672a21eececea62f6bdcc85eec8b2ebc4cbc3a9b3ffa407d3c94a7ad1a2d6a2a19c0db4be6d913744d977bd3b6303a3d60120d74b7cd95e6b5bf43d8863d", 0x8d}], 0x2}, 0x0) 18:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:30:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x40800, 0x0) bind$rds(r1, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000200)=""/178) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000300)=0x46) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000009080)={0x14, r3, 0x390c179b360adb45}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xffffffffffffffce, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18:30:57 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) mmap$perf(&(0x7f00004c2000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x200) 18:30:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 334.769451][T12281] __nla_validate_parse: 5 callbacks suppressed [ 334.769483][T12281] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 334.785987][T12281] net_ratelimit: 561 callbacks suppressed [ 334.786002][T12281] netlink: zone id is out of range [ 334.797113][T12281] netlink: zone id is out of range [ 334.802272][T12281] netlink: zone id is out of range [ 334.807603][T12281] netlink: zone id is out of range [ 334.812816][T12281] netlink: zone id is out of range [ 334.818073][T12281] netlink: zone id is out of range [ 334.823232][T12281] netlink: zone id is out of range [ 334.828552][T12281] netlink: zone id is out of range [ 334.833689][T12281] netlink: zone id is out of range [ 334.838927][T12281] netlink: zone id is out of range 18:30:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) [ 334.968775][ T32] audit: type=1804 audit(1595269857.915:83): pid=12286 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/61/bus" dev="sda1" ino=16137 res=1 18:30:58 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0xa202, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0xfffffffe}}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/89) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:30:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x80041270) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x24040091) openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0, 0x24) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clock_adjtime(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xb880}], 0xa, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x104194b1432d0209}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x4080) 18:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:30:58 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0xfffffffffffffff8}, 0x16, 0x2) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000280)=0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r3, 0x821}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, "306b2a4ff9fa457429ea062b8266901de919cb557d"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x8, 0x7, 0xe32, 0xab00]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) 18:30:58 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000005544917d703247916361666829c0b6949ae09d089791d7a7bc60ab2ac3b7b87da98226edb731deb03f97d4a2c87b558e91a7c693462249cf262867cb839b6e66eeada96b6ceecf4d77b108f2de21336efb68f6639fda9232390b36a07f33708481dd7caa2b005e4ebaca210841f82cf88242432ba5c1cd34b2aab1402df0c8dd0319196d4d23bc5b1ffda8aca313a6c857a8dd5f59015ad658280de3427f78921e258eb183d187b26fa751c3e765499260b6cd92f696f5884b35f49e", @ANYRES16=r1, @ANYBLOB="210800000000000000001f000000"], 0x14}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r2, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@l2={0x1f, 0x4, @none, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df014250b6497a3e7ae8e99d3ebacf", 0x1c}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20012bbd9025000000000000000000", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="76b3dd0ddbbe95aea8f270a2eea3c2627a108e1df8de94d61559310226d4ba566d768b82ce0d1c838f8e7dba0750c68dc6af4669279ac9ee09433b02f654fea0ada60c88a119ed4b16899d6ee72f2465e0813a50cafb0d3d6d2aaf43334af4fce79a9694fc17bec415a9c789f785de395bb491be5eb934c132dcd1744274b5e68991bcdcc718ce6c65056a773d1384eac0ab4d116553be679593946318ddffe592460294a12c08533ae38adf6bfec730b39dfbee35c8cf000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) open(&(0x7f0000000340)='./bus\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00001ab000/0x2000)=nil) 18:30:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:30:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) close(r2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0ac33865f248000036000535d25a80648c63940d2ba9a88727599952cc3c3b0224fc605a0000000a000400050082", 0x2e}], 0x1}, 0x0) 18:30:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 336.637408][T12337] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:30:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:30:59 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x5, 0x5467, 0x81, {0x400, 0x532}, 0x7, 0x8}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b07073900376d"], 0x40) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x10000) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:30:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "75a656d41b6834bb35cd332941"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) 18:31:00 executing program 0: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935019700f01700d1bd", 0x2e}], 0x1}, 0x428c0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000180)={0x3, @bcast, 0xee00}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x8040) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x7, 'gretap0\x00', {}, 0x7}) 18:31:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:00 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f0000245000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00000ce000/0x2000)=nil) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, &(0x7f0000000000)=""/10) 18:31:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) openat$null(0xffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x121000, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x8, 0x6, 0x1, 0x0, 0x40, 0x1, 0x80, 0x2, 0x75, 0x3, 0xfb, 0xf7, 0x0, 0xffffffe5, 0x6, 0x1f, 0x9, 0x4, 0x40, [], 0x2, 0x85}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:31:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 338.033178][T12386] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:01 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x7, 0x5}) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00402259f82e3c3243df2502108006ff00fa0000050000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c0a1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00001acdb1795cda2ae4461d3a90af3095aad8411a8dabb89a8bbfd1", @ANYRES16=r2, @ANYBLOB="05000000000000000000010000000000000009410000004c001800000000696200"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x40048) [ 338.659522][T12402] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.741097][T12407] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.848551][T12402] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) [ 338.888755][T12412] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "75a656d41b6834bb35cd332941"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) 18:31:02 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x80) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:02 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x2e}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xac, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040014}, 0x240080c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) mremap(&(0x7f000051c000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r4 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000240)={{0x5, @addr=0x2}, "67877ea6cf8e27b058eb81aa475b425a5c28d45965e50f69babf2a512ac88c36"}) 18:31:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "75a656d41b6834bb35cd332941"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) 18:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:03 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40086410, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0xec, 0x6, 0x0, 0x81, 0x59, 0x1, 0x4, 0x81, 0x81, 0x6, 0x78, 0x7f, 0x80, 0x1f, 0x8, 0x80}}) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x40, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ca}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x228, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffeffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5548}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa1, 0x3, "8273abf1fa027c595595c6627658a7fe361a482dbf8cad21943a0298415abc1cc58dcd9726edb0f1e9d56a429ff677336cd396f8df5ab02e2a8c9fec1ddbc549e6ea3a1793e3933d6ff71eb3434ed80d1e42b766cc29634d21ee94a8f4a0cd141f921ce45884450021cac8a9b8f2f66d6f9d39431f6c52a35d7c7967b06d3cfe421476da9f19714b92944f25074a6466a419c6034ce48176d663eeae39"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ID={0xf, 0x3, "2242d9d9052c239fd13d5c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_NODE_ID={0x17, 0x3, "e2c19da2029a942aa5740bbe5872473d8ede1c"}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6974}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4020004}, 0x1804) r7 = dup2(0xffffffffffffffff, r2) ioctl$KVM_S390_INTERRUPT_CPU(r7, 0x4010ae94, &(0x7f0000000040)={0x7fff, 0x7f, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:03 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa1) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = accept4$vsock_stream(r0, &(0x7f0000003300)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000003340), &(0x7f0000003380)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x10}, 0x10) [ 340.622824][T12468] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.632539][T12468] net_ratelimit: 31 callbacks suppressed [ 340.632554][T12468] netlink: zone id is out of range [ 340.643716][T12468] netlink: zone id is out of range [ 340.649660][T12468] netlink: del zone limit has 4 unknown bytes 18:31:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f0670ca3d702e0ae7fccf2394e3e73da60ae0d7c2936d45eb0440d2e43351a7cd9"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "75a656d41b6834bb35cd332941"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) 18:31:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) [ 341.027400][T12468] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.037582][T12468] netlink: zone id is out of range [ 341.042753][T12468] netlink: zone id is out of range [ 341.048120][T12468] netlink: zone id is out of range [ 341.053279][T12468] netlink: zone id is out of range [ 341.058496][T12468] netlink: zone id is out of range [ 341.063734][T12468] netlink: zone id is out of range [ 341.068897][T12468] netlink: zone id is out of range [ 341.077168][ T32] audit: type=1804 audit(1595269863.996:84): pid=12471 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219792501/syzkaller.vgic5F/131/bus" dev="sda1" ino=16239 res=1 18:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:04 executing program 4: r0 = gettid() tkill(r0, 0x8) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mountinfo\x00') ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:04 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b07073900376d"], 0x40) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x1, 0x3ff, 0x10000, 0xf410, 0x3a}) 18:31:04 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f0670ca3d702e0ae7fccf2394e3e73da60ae0d7c2936d45eb0440d2e43351a7cd9"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "75a656d41b6834bb35cd332941"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) 18:31:04 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x11e) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:04 executing program 4: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) mq_timedsend(r0, &(0x7f0000000540)="710c3aba420d90d378d1cf089abf7528198851ed5a9b86ac30bfdffb5039e83ca302808d596e35bff7c4a12539b062068b0ca4d9028cbacfac8f", 0x3a, 0x1ff, &(0x7f0000000580)={0x0, 0x3938700}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x6a0240, 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0xeaf, 0x3, 0xc5f6}) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$int_out(r6, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840300001400000025bd7000fcdbdf25ac1414180000000000000000000000007f0000010000000000000000000000004e2200094e2000000a00e0802b000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x384}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e23, 0x4d85, @local, 0x6}, r7}}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:05 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) [ 342.197944][ T32] audit: type=1804 audit(1595269865.146:85): pid=12521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/71/bus" dev="sda1" ino=16250 res=1 18:31:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:05 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "75a656d41b6834bb35cd332941"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x30}}, 0x0) 18:31:05 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) setuid(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x23) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r7, r5, r3) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x108031, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@fowner_gt={'fowner>', r9}}]}}) readahead(r0, 0x7fff, 0x5) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000040)) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='@%]${-\\-].\x00\x00/+\x00v\xe6\x054\xbc\xe0\x12\xb8\x94\x93\xb3\xc6N\xe4\x97\xfe\aD,\xf7\x87\xb6E\xfb\t\xc1\xea\xea\x15W\xfb#a%\xbf\xc1\xae\x95F\xf7\xdc\x05\xc2Q\b\"u:$RT\xa1\xa9\xec\xd8+8\xaf;\xe0\xb3\x04\xd60\xfbCW\rT\x03\xea\xfde-a\x92z\xec\xc14k]/\x95SP\x98.\xab\xbf]5\x1c\xa8\b>\xff\xca\x00yA\x1d\x17w\n\x04\xa80K0\x9f\xcbZ\xc0\xf1\x9f\xcecJr\xea\x81\xf6\x85\x85\xa7\x00+\xe3rq\xff\x82\x8f\xc3NX\xf1u\xf3\x11(\xad0\x9bwo\xcb\x9e^\x82\xa7\xae\x0e\x84\xd6\xfc\xb99x\x9a\x18r\xed\xad\"a\xd4\xf1\'a\x13\x91%\x82\xfes\x8d\x166\xbc\x8e\r\x80P\xa2\\r\xca\x88U\xef\xdc\xa1_G\tV,}\xc0\xc2\xe22\xf5\xe6\x1eCW\xf0QN$$\xc8K\x93t,S.\x9f\xd6\xf78\x1aV\x02\x14\x9ac2b\x15\xa3^ \x90a\x9d7S\xaa\x82\xc1\xc4l\xb9\x96u\x18\x86x\x98*\x85\xb3\xaa\fs\x95\xae:1\xc1\x95\x8fV\x84 \x11\xdf\xd3\x87\xae\xcca\x1aV\xef\xf0,\xf0\x9e\xb5\xb9\r1;\xc6\xc3\xe2\xc8U\xcf\xd1FaH\xa0\x8aus\x86\"N\n\xcf\xc1T@j\xf5\v9') madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:05 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:31:06 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000020000/0x3000)=nil, 0x3000, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) 18:31:06 executing program 1: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000340)={0x20, 0x0, 0x2, {0x3, 0x0, 0x4}}, 0x20) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x408c4) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0200001d7ea75dc1d0e2e6460000b96813e20dc43e74c852d040c953bb5e32af56120000000000000000000000000000f4a89600a52176da79f22388e4e6e18b32e29f84ea", @ANYRES16=r6, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x404c040}, 0x4000000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x7, 0x5, 0xffff, 0xfffd, 0x5, 0x1, 0x3, {r5, @in={{0x2, 0x4e24, @local}}, 0x81, 0x4c09, 0x1, 0x7fffffff, 0x7}}, &(0x7f0000000040)=0xb0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r7, 0xc0c0583b, &(0x7f0000000080)) ioctl$KVM_ASSIGN_PCI_DEVICE(r7, 0x8040ae69, &(0x7f0000000500)={0x0, 0xae, 0x8001, 0x4}) 18:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:31:06 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) madvise(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0xe) 18:31:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:07 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') 18:31:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:31:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f0670ca3d702e0ae7fccf2394e3e73da60ae0d7c2936d45eb0440d2e43351a7cd9"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x10, 0x8000000000000003, 0x0) 18:31:07 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:07 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000100) 18:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:08 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) r2 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) ioctl$VIDIOC_DQBUF(r1, 0xc04c5611, &(0x7f0000000180)={0x0, 0xb, 0x4, 0x0, 0x758, {0x0, 0x2710}, {0x3, 0x1, 0xfe, 0x9, 0x5, 0x20, "c9313f72"}, 0xfffffff9, 0x1, @fd=r2, 0x3479fe38, 0x0, r3}) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r5, 0xc91add0bf88807dd, 0x0, 0x0, {0x2e}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002dbd7000fedbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300020000008cb3f1b1c2bba6f420a1600979f23fbc40372587fee91c3f78ae03f0672d1b438a773a59025a8417b7a845f9cd6b7f77983e6afe687afac2c7c080385defe1555b25eac8058dd189"], 0x38}, 0x1, 0x0, 0x0, 0x10014}, 0x24008001) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:08 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:31:08 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/74, 0x4a}], 0x5) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000000)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000380)) mremap(&(0x7f00001f9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000043a000/0x1000)=nil) 18:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:08 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) [ 345.864850][ T32] audit: type=1804 audit(1595269868.816:86): pid=12638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/76/bus" dev="sda1" ino=15748 res=1 18:31:09 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x80002, 0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:31:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x23) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, r7, r5) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)="b6085e2e40bdaf141e25804aec1de59bd5ef7f5a4c28d3947d3505a7c22ede68888949882b0ef1a52e990bb8c805758d7948ee5046f22c779912a56b363e4e0c8e0ab9121a1c9409ea2b85650f", 0x4d}, {&(0x7f0000000140)="4b1e7646ea9fb5de003a533d9687fbe5c31e2ac3777a3b2ce9c81a75d0c8d0a0789b410256c366f31ead3cb3aa789b0ee9a398af692ca3714e7f51093e4978ea5f24298f32bc253f40709c34383b25bf8781cb64577da24f6d580523a903f490db5f44bf07ccdbc074b6bd66e4584160b8848fea3f5414c4b96a2572760f8a7ae9bf63c209b4c2156668fb9efd17761c8cc2b67f3becea76cb59db46f7269d57b52e237bd23c283f1e1c434affda9423102ce251e8a15d48f2facfd660fe17629b35c1ff861cfb70426e287643", 0xcd}, {&(0x7f0000000240)="69b9c62e5a219a3905695a65a796081a500fbab3984bdc9452bb507059f873ecc60a1831d07514e3bdc490dd4186", 0x2e}, {&(0x7f0000000280)="3468215c04d7761567c7961484019643a230683a5c53", 0x16}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="b4b3fa1fd785c3fc7d910ef1d08398a6d06efed73f7fc8b07cc8de939ca44b271415ebbf07ae4cc45653941ebaf957892f5ad73ccde31dc8dc49b89b8edaa56747c34e2a3cb19c9287784d33827d2178cd58906c878ea08e0c7e0b2a8e86e08d9027928dc55fbae7a65ccac786e3f31c28c6c479cfceee535b9339613c9790b8dd2030a9c53c7efaa563ab2c44273cc11d4dcce3e9786072556d22ace440858a17efbd85e6fbb1f7149b76e131f4f7a999", 0xb1}], 0x6, &(0x7f0000000cc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x128, 0x20000000}, {&(0x7f0000000e00)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000e80), 0x0, &(0x7f0000000f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, r1}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, r3, r9}}}, @rights={{0x14, 0x1, 0x1, [r10, r11]}}], 0x84, 0x10}], 0x2, 0x8090) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) 18:31:09 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r0, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r3, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r3, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@can={0x1d, r5}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="fffa81d71fec0161d5ab665126df01484f3fbf2d72bbbfd96bacee771f7a4250b6497a3e7ae5e99d3ebacf", 0x2b}, {&(0x7f00000002c0)="24dc6f0e56ecbbc1054eceff40", 0xd}], 0x2}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x808, 0x0, {}, {r6, r7/1000+60000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "c5326dee57b3ad7e"}}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) open(&(0x7f0000000080)='./bus\x00', 0x10300, 0x0) madvise(&(0x7f00002b8000/0x4000)=nil, 0x4000, 0x14) r8 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r8, 0xc0c0583b, &(0x7f0000000080)) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000180)={0x2b, 0x6, 0x0, {0x2, 0x3, 0x2, 0x0, ']2'}}, 0x2b) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x1000, 0x0, &(0x7f000052f000/0x1000)=nil) 18:31:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:10 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8102, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r3, 0x9, 0x200, 0x80000001, 0x8, 0xc9}, &(0x7f0000000040)=0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:10 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:31:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:10 executing program 4: mkdir(&(0x7f0000000000)='./bus\x00', 0x150) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mbind(&(0x7f00001d7000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000040)=0x400, 0x5, 0x4) openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2080, 0x0) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) accept4$unix(r0, 0x0, &(0x7f0000000100), 0x80000) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:10 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:31:10 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000007000/0x6000)=nil, 0x6000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x2, 0x1477, 0x0, 'queue0\x00', 0x3ff}) clock_gettime(0x6, &(0x7f0000000000)) 18:31:10 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:10 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:31:10 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x4}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 348.194627][T12715] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.204377][T12715] net_ratelimit: 48 callbacks suppressed [ 348.204392][T12715] netlink: zone id is out of range [ 348.215484][T12715] netlink: zone id is out of range [ 348.220647][T12715] netlink: zone id is out of range [ 348.226696][T12715] netlink: del zone limit has 4 unknown bytes 18:31:11 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x20900, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x142) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:11 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) [ 348.299606][T12715] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.309281][T12715] netlink: zone id is out of range [ 348.314648][T12715] netlink: zone id is out of range [ 348.319815][T12715] netlink: zone id is out of range [ 348.325974][T12715] netlink: del zone limit has 4 unknown bytes 18:31:11 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x38827441, 0x541000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000054000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x10000000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:31:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 348.621119][ T32] audit: type=1804 audit(1595269871.567:87): pid=12731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219792501/syzkaller.vgic5F/141/bus" dev="sda1" ino=16269 res=1 18:31:11 executing program 0: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:31:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:31:11 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:11 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="37c01d53060ee5bfc41c888e3e07412ce2e481b93806a59eb87a23fd43dc342a85e8b84006468c1a5099ec3b52d841551e2e36fdacb93efc0a7bb994c98748234b35b1bd4a9ca49fb578aa6a4af13ddc00d327fb03", 0x55}], 0x1, &(0x7f00000001c0)=[@ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x55, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x101}]}, @rr={0x7, 0x13, 0x69, [@local, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, @empty]}, @generic={0x89, 0x12, "5c5290ab60c89c05faad50a816c34046"}, @generic={0x44, 0xc, "f413b6db2bfb0a96e23a"}, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0x9, [{@rand_addr=0x64010101, 0x6548d6db}, {@private=0xa010102, 0xfffffeff}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @lsrr={0x83, 0xb, 0xb3, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x54, 0x1f, 0x1, 0x5, [{@empty, 0x5}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x40}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@local, 0x8}, {@private=0xa010100, 0x1}, {@remote, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x1}]}]}}}], 0x108}, 0x40) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) fcntl$setlease(r1, 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:31:11 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x244e82, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:12 executing program 0: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = openat$null(0xffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400000, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3f, r1, &(0x7f0000000100)="fc6e430a216123ab7644221f55a0f1ddd5e835be43f09753893d44cae964af1bb0e2a9270b89b59dfa126e41afc638aaca6b186674f6a53ac1422939814d6c4276856105789125aba0460317ba012846ea057d178043255e2c51d759e6fbb5a1dd315a22971c80a55a44", 0x6a, 0x2, 0x0, 0x3, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8001, r3, &(0x7f0000000380)="8dda19da0ab8bb06f06202a10efe7004ce377040e6341552af6586450984564f00369ff44f55b4de36f86bc6b1ee3cbe2263b799b27cf604a3002a29fdb1f4f0385218d402663dd0b9757e76c873060331ef3e57372fe66d04f271bf6861a4af1700edf26860a78ed13c1aa3eba1a14a4bfa462491dc68018402f6f85a4b916c844a9dd34a82cdbc6920b36f066ce294db06d1b98593714914fa7ceeb9056151ebe47e8ae674cf4ed886124fd042b4c9a7b51c9bbc29761267eb5372a766290c676c0bcda344e7b23023f81b5b76d4bf66e7481c1bebea461883141144bd771da2e6640ea7b88c3420f0f631fd5f6270", 0xf0, 0x3, 0x0, 0x2}]) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="0a393f0036070535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}, {&(0x7f0000000280)="1de17ea8f7a0ef97d0f0ec59c5277d233dc886ba0bc8acbc615ef724930d8124cc4123e0286ea02b659612bc83d32193ddeb281d21bcfb5d118bd17fddda98e4e125df2dfb8d551ee89b2e3042f9406a3ec04820d720ffecd37c38d37454fb9495c5e92c2a5881f01304e4f4284e05afe0d5a634f1e45ca4bd89a9d78cbb6eecb6f38dbe8c8dec53ac2a989f11eae6ab00e1dd0c8c98c1f38500b734068c84a8678a9cbdb1c8987fb9770a0713bd", 0xae}, {&(0x7f00000001c0)="473b68b4e64c3c34e1592c44814ad63cf96bd10a93d6c5fe26486de8c9b1446638318e523b5f71b686e87cc87c0a8c4a4ef8ca8eca52a36319affaf1d9d09e74665bebfbc15948cf24", 0x49}, {&(0x7f0000000080)="33ab9a41985e29393dedc986b056a78d2a96bf4357457d766e850933e460af1dfaf98accb67c", 0x26}], 0x4}, 0x22008084) [ 349.189312][T12747] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.199151][T12747] netlink: zone id is out of range [ 349.204724][T12747] netlink: zone id is out of range 18:31:12 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:31:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f0670ca3d702e0ae7fccf2394e3e73da60ae0d7c2936d45eb0440d2e43351a7cd9"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 349.398411][T12756] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.1'. 18:31:12 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x408100, 0x0) getsockname$netrom(r1, &(0x7f00000000c0)={{0x3, @default}, [@null, @netrom, @netrom, @default, @bcast, @netrom, @rose]}, &(0x7f0000000140)=0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) sendfile64(r0, r0, &(0x7f0000000180)=0x3, 0x101) remap_file_pages(&(0x7f0000429000/0x1000)=nil, 0x1000, 0x800008, 0x0, 0x0) [ 349.513155][T12759] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.576587][T12764] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:12 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x80) r1 = socket(0x2, 0x80805, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r2, 0xc0c0583b, &(0x7f0000000080)) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0x7, @private2, 0x2}}, 0x80, 0x1}, 0x88) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 349.675523][T12764] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r3, r4, r5, r0, r6], 0x6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x24000800) [ 350.007114][ T32] audit: type=1804 audit(1595269872.957:88): pid=12780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir219792501/syzkaller.vgic5F/143/bus" dev="sda1" ino=16288 res=1 18:31:13 executing program 4: r0 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x87) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x0, 0x180100) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r2 = dup2(r0, r0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = gettid() tkill(r5, 0x8) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000140)=""/250) fcntl$setown(r4, 0x8, r5) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x52d, 0x6e, 0x4}, {0x3f, 0x7, 0x6, 0x5}, {0x3ff, 0x5, 0x40}, {0x241, 0x1f, 0x59, 0xfffffffe}, {0xd0, 0x8, 0x8, 0x9}, {0x3, 0x80, 0x0, 0x100}]}, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:13 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 350.345862][T12798] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 350.406643][T12802] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 350.453978][T12798] netlink: 4826 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:13 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={r0, 0x1ff, 0x4, 0x1}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 18:31:13 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="3b5c0a3401a3daf9f1941132d7aa2ed1f26331bc2289b5ef001f139bfbc8ebb727014838b5d3807e674cda1b1da67ab1c1c33604bdcb3c601ae13d98c25aa66327855ec23b6045d081bff4bd48d866515da91209cef700613f62e9bce4eb98f4a2c6e67e5b81da2daa898ce84eb1e6a938fe9e6ad9106f1d56ae834146584fc152ab64eb9e8709378ce8e620e4b3e7325c6d", 0x92, r0) keyctl$clear(0x7, r0) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) preadv(r2, &(0x7f00000024c0)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/160, 0xa0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x7, 0x6) 18:31:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:14 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket(0x2, 0x80805, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r4, 0x7ff}, 0x8) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6, 0x4ea171a6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r7, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) 18:31:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x1, 0x0, 0x200, 0x4}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x2e}], 0x1}, 0x20040801) 18:31:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:14 executing program 3: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:31:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:14 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x130) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:14 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = pidfd_getfd(r0, r1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0x8000, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:31:14 executing program 1: open(&(0x7f0000000040)='./bus\x00', 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket(0x11, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x25, &(0x7f0000000000), 0x20836000) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73797a31d91c6bd51782589682f4c62b34340d37b153ff02217b85ef39fcc16ae9cf63955e565e7e428453f288123a4a42a5e8ca1c5e9f64c62662a77e0e1b062dc8922aa87af6f9e1a91227f5eb80f619e5ff786830f302c920a14307000097da895c1f4a17e1a0fc175b17af97d923f70d0676867cd77e1c5bee2612330e3ed0501eb2588f7912cfde962eff372b29f12039d15a9481e5a3"], 0x99) madvise(&(0x7f00003c3000/0x2000)=nil, 0x2000, 0xd) 18:31:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:15 executing program 3: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:31:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:15 executing program 4: syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x4c81) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000487000/0x3000)=nil) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), 0x1) 18:31:15 executing program 0: sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x40, 0x1}, 0x3}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="8f88e164fc141978dc86407676f39698f5de30b62d80ca9aa10472eb428b244e79fa73c6773bfed537704f5f336b394b2e1deac50e5475817961bb5cdaf9474f1e808d237227eba374fadfee2fafaef6ac886508b68dfedefed3cb9d7c3d568d9718bd66f1cb09", 0x67}], 0x1, &(0x7f0000000440)="127509630029fb2e9c3652eb68a674a11c2a4f31e8e91dc0bd6f417a92df595a03ea9604b671aaf1582e5aab6dcd6e566ab36a14e75f46924baab2bca425cc8174693d05dcaa62402ffdd63e874a304bb4142513bd11ddcc03f4dd", 0x5b, 0x800}, 0x69c70c1f79f4342a) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fccdb7b9fcee7fd96a57756aa491d7a10f27aae694a00ab070cc60a5e8ac6ebf9f3bc87ad2", 0x25}, {&(0x7f0000000080)="4ab62558b16c7ce10efd562c1abfcdc432463a9d0744b2eac30357bd6aa6526862334a4176b419877170ff5ee633e78a0ae30a61952c8a4b5683ac4c002a6cec5d5f4ed188aa9c41c5a4732960cea08ee65113f57e34594e", 0x58}, {&(0x7f0000000100)="7ca07f59ed5583f65e7ffc0d2e0c9b09eb016e320a172315aee2fd010a1183868c3841ada89db4d749301964be5faeb8628efb4a31516bbe6a5ec22f1a5fef2b828926a018dd3accb0968b2495e1ca890b648c6ba23c0eaff94d64", 0x5b}, {&(0x7f0000000180)="03ade70de7ba15c7fbcd11b0a4276a5b52f63bdd2757e66859b578424e3809e05e88f3fbffb44f079641535cee529ac6abbd512cb9911d9154213c35aacd6f09a1f5e9716dcce1251a964fc420adc655484ed6dda33786b0d3d48c99a1f9754becb416a44f2a3784994f9e422d18c9d8f0", 0x71}, {&(0x7f0000000200)="3141f44690bc58030cb8c00815d2ee7e30f32fb3738f2f1881d63a2b1bc59dced76c765b72e8348891dd4535f734ba2daf93310161cef3be659b2f137ce187cb8162db09340ac44734eb6afae868eb9903188e1c890e476f9398ac0361f6811b79aa563f2c5654368ad8d8c92c2dc9772e809fb8142b44780dc0aaade65faaa24147b25c8de9aa6772108f4646e67bebb6a54c2ccbafe1584ff1670f777d2ffc48bb7982613cb30a970b04b1b15864fb61f93ff45146629d67157912825383c12751c3098ef1bf0cb5d2499b085884712ac7e52e8d9b22c29b6a583ed5a2eece0ab5a2345eac4d441dcbe506d3900b788a3360c31808", 0xf6}], 0x5}, 0x40) 18:31:15 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x40, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)={0xa2, 0x29, 0x2, {0x0, [{{0x80, 0x2, 0x1}, 0x0, 0x1b, 0x5, './bus'}, {{0x20, 0x4, 0x5}, 0xff5, 0x6, 0x5, './bus'}, {{0x0, 0x3, 0x1}, 0x2, 0xea, 0x5, './bus'}, {{0x0, 0x4, 0x1}, 0xffffffff80000000, 0x5e, 0x5, './bus'}, {{0x8, 0x1, 0x8}, 0x1, 0x3f, 0xb, './bus/file0'}]}}, 0xa2) 18:31:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:15 executing program 3: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:31:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:15 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8000, 0x80) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x23) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, r3, r1) mount$9p_tcp(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x1, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@mmap='mmap'}, {@cache_none='cache=none'}, {@uname={'uname', 0x3d, '+([:'}}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@version_L='version=9p2000.L'}, {@afid={'afid', 0x3d, 0x80000001}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x38, 0x30, 0x35, 0x64, 0x37, 0x30, 0x31], 0x2d, [0x39, 0x30, 0x64, 0x31], 0x2d, [0x32, 0x65, 0x30, 0x65], 0x2d, [0x34, 0x39, 0x65, 0x31], 0x2d, [0x61, 0x33, 0x0, 0x33, 0x64, 0x32, 0x35, 0x35]}}}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) openat$ptmx(0xffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0xb5d381, 0x0) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) lsetxattr$security_evm(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="040737ea7ee7734cc85cab315f4201b923ff4d"], 0x13, 0x2) 18:31:15 executing program 0: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18:31:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) fchownat(r0, &(0x7f0000000000)='./bus\x00', r2, r4, 0x100) 18:31:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 18:31:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:16 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e000800005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000660001ff001d00ff08202200e2000000", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) 18:31:16 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x82040, 0x112) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x41000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) 18:31:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:16 executing program 0: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x6340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sg(0x0, 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa89b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x9) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x200000, &(0x7f0000000040)}, &(0x7f0000001380)="59a59588c65b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) syz_open_procfs$namespace(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r3) bind(r3, &(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80) ioctl$KDSETLED(r0, 0x4b32, 0x1000) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1a, 0x10, 0xffffffffffffffff, 0x2a36f000) perf_event_open(&(0x7f0000000200)={0x6, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x2}, 0x1021, 0x0, 0x0, 0x9, 0x1}, 0x0, 0x5, r1, 0x3) [ 353.989918][T12951] __nla_validate_parse: 13 callbacks suppressed [ 353.989948][T12951] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.1'. 18:31:17 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getpeername$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 18:31:17 executing program 0: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x6340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sg(0x0, 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa89b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x9) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x200000, &(0x7f0000000040)}, &(0x7f0000001380)="59a59588c65b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) syz_open_procfs$namespace(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r3) bind(r3, &(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80) ioctl$KDSETLED(r0, 0x4b32, 0x1000) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1a, 0x10, 0xffffffffffffffff, 0x2a36f000) perf_event_open(&(0x7f0000000200)={0x6, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x2}, 0x1021, 0x0, 0x0, 0x9, 0x1}, 0x0, 0x5, r1, 0x3) 18:31:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:17 executing program 1: 18:31:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:17 executing program 0: 18:31:18 executing program 4: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff], 0x4152) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 18:31:18 executing program 1: 18:31:18 executing program 0: 18:31:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 18:31:18 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:19 executing program 1: 18:31:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:19 executing program 0: 18:31:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[], 0x3}) 18:31:19 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000180)=0x6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xb0000, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000003010108000000000000000002000000300201802c00018014000300fe800000000000000000ff07000000bb14000400ff01deff0000000000000000000000012d68e703f045b54a404e1e9118a8111d36fbec00450ad7b0e40893b182502f836a21ef0da028f42027a15345fcf2467e774c3ded17cce949b45c80458e1530fcc5d113c775f20c2cab1423ac7fc2af29937a6d7cb9f81ae52e53a30075e1568736c1ea293371907e8bd878aa412351b500000018aa1401dad8e2070ff67ee626a981402b170f82c15063f4af0deb76c3966e5f3ea938f121afa7ad05e4bc5d8a2489efd966d16026888f130efbda2886801f984c43e2f374223eebfdd0204f76a848d136fc41e3982d756559b4437fd384dbfa451fff0f3b1bd2d5061952bbf11caa71a60958af97999044711a0a1e68ba3204e85a7931e395dce2490ed65c0991fa4cc043366b2f98c7cbc6a71e95c41c98552ab8af95deb7c3d7bf4aff9cee7056afe20bf61d8d0cf38a1ad2c4d95c0175f907ca70d41bfffd6919e285cd9850b9a7212635fd7c483772ce14e9426d62158b89aa797c9c07"], 0x44}}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000000)={0x0, 0x101, "a238b042fdb9edbc168f46534705060bff1121955f9cdb7a523c3e22bbb9c6ac", 0x100, 0xb3, 0x7fffffff, 0x3, 0x5}) 18:31:19 executing program 1: 18:31:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:19 executing program 0: [ 356.909736][T13058] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 18:31:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:31:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)) [ 356.973198][ T32] audit: type=1804 audit(1595269879.918:89): pid=13059 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/92/bus" dev="sda1" ino=16340 res=1 18:31:20 executing program 1: 18:31:20 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x715, 0x100) poll(&(0x7f0000000040)=[{r0, 0x11c}, {r1, 0x8}, {0xffffffffffffffff, 0x8}, {r2, 0x4}], 0x4, 0x40) 18:31:20 executing program 0: 18:31:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)) 18:31:20 executing program 1: 18:31:20 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:31:20 executing program 0: 18:31:20 executing program 4: open(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:21 executing program 1: 18:31:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)) 18:31:21 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:31:21 executing program 0: 18:31:21 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x42940, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x1, 0x0) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r0 = openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x210202, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0246400, &(0x7f0000001340)={0x7, 0x2e97, 0x7f, 0x1000, &(0x7f0000000140)=""/4096, 0xf2, &(0x7f0000001140)=""/242, 0xca, &(0x7f0000001240)=""/202}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001380)='\'/\x00', &(0x7f00000013c0)='}:g\x00', 0x0) 18:31:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:21 executing program 1: 18:31:21 executing program 5: 18:31:21 executing program 0: 18:31:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:21 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x80, 0x10001) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x27c, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x9c, 0xf8, 0x0, {}, [@common=@ah={{0x2c, 'ah\x00'}, {[0x8, 0x9478], 0x1}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x9, 0xa, [0x20, 0x8, 0x16, 0x1b, 0x7, 0x34, 0x3d, 0x22, 0xb, 0xd, 0x34, 0x16, 0x32, 0x15, 0x23, 0x3], 0x2, 0x401, 0x8}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xff, 'rose0\x00', 'gretap0\x00', {}, {}, 0x29, 0x3, 0x1}, 0x0, 0x94, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}, {0x1}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x1f, 0xa, [0x30, 0x39, 0x34, 0x29, 0x19, 0x2b, 0xa23, 0x39, 0x34, 0x39, 0x1a, 0x6, 0x2a, 0x32, 0x38, 0xa], 0x1, 0x400, 0x80000000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2d8) 18:31:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:21 executing program 1: 18:31:22 executing program 5: 18:31:22 executing program 0: 18:31:22 executing program 1: 18:31:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:22 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f00000ce000/0x2000)=nil) 18:31:22 executing program 0: 18:31:22 executing program 5: 18:31:22 executing program 1: 18:31:22 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101202, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1000000, 0x91011, r0, 0x8000000) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000040)={{0x779b607f726e5dc4, @name="1e8c8b26213691b416c1180b4f0cec2b513f20b25dc38dfd64200d181f049552"}, 0x8, 0x8, 0x4}) 18:31:22 executing program 0: 18:31:23 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:23 executing program 5: [ 360.328112][ T32] audit: type=1804 audit(1595269883.268:90): pid=13164 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/98/bus" dev="sda1" ino=16357 res=1 18:31:23 executing program 0: 18:31:23 executing program 1: 18:31:23 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:23 executing program 5: 18:31:23 executing program 0: 18:31:23 executing program 1: 18:31:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:24 executing program 5: 18:31:24 executing program 0: 18:31:24 executing program 1: 18:31:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:24 executing program 0: 18:31:24 executing program 5: 18:31:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:24 executing program 1: 18:31:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:25 executing program 0: 18:31:25 executing program 5: 18:31:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:25 executing program 1: 18:31:25 executing program 0: 18:31:25 executing program 5: 18:31:26 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="417af10b49abfa1c9987b8eed37d007d572e194d8e6c52735f7ed4cde5441fb726198426a07ca539765aed78f1895773efc9475243994950660cd31887bdf9fa492e14f38ddd4c90d621dc83bd6922a1a17af93ff52d6967f857656114f50a004ee3e7922555f4da9bcc942219778adab92da4a48fa5f9ae1a897652dc62d3075996331b41828d5b3fc944493c6e7e13924c07f0d1648358f0207be8b468f347b459019298b9ff66546500bfeffdf2eed2d67debd53976c36758e39c18252ff2a52f73bedff00954540b27ffdbfbf925159dfb3e8354c3f900b8939795f32fdf70dc743ff72b1f", 0xe7}, {&(0x7f0000001680)="d50c6c70e06a170b950c8caf2c4c86807a0543c244e1156bb905e8942ec2019b59f1e27d20ddcf2c7c0969b8bbf0d21db53713b90cac06831203d4a07f64244ccde3901a7b3fa499a61cf6cbd5afc02822f03139f1", 0x55}, {&(0x7f0000000200)="e29449b75243a5c9fbfbc64703365ab438c0", 0x12}, {&(0x7f0000000340)="9a80d714c488942fbf3936f791bcef19b1f1b5b647755b7cda4101ff8c0e16d37fedd7e63ff8bf28e27038f56b08f4ef6821b7d5915c8d47969c5ef00c5ec8272343f57e294b9ffb857b12a1cb25486bf9e5cd5f07e4f4b57391dc82faba92ad39478b616eff3a8ef9c72ea11e73f6811facd75473df00774a7744ce09aa076e9fc1e7d369d42fc3d2e043b20554c789a34932bba4ab8ba90fcb9d926710da6dba943581852a4cdb68b50f48f1fc14609dc4316e6ebab134fb2ec0328b9256a434cb5e62160a6af3fbe2212fc0fad362f61a44bc6261553b92204b962660d532784ac2a18328", 0xe6}, {&(0x7f0000000240)="338a5efb0e9df6fcccd5abc7e407d8c04259e80371cc74bc65466b76f5053d31a0c2ad8f260019dca58125f8ab1ab984b313d2c425df08913ccc6fe4ec9aeb21d4ef1c890360f33652f5447c04000132098e8054c084aa70cb77bfaf52305de6344922984c5eab1af54f11b585e26606cbe42e69ecd3a03685cfc9eeea5543dbde57abd3693a3191e200"/148, 0x94}, {&(0x7f0000000440)="021c83ad4672d27d19d1edf16e1e84cb0d7044869d419c61cea157afde1326eff189865cdb6034fa83b449c739b818583c182412e2151d30fe764aed3f2f34", 0x3f}, {&(0x7f00000004c0)="a73763072e6e3d28c19e51b234bb7d59473350d4289854c74d3788db8395eb02e1e8b30cd8fba571ef5e5593c195cba47f862e0514d25743f5ae36eae0042419c32aa1f54233ce97ebc5c5c75608c9bd5260c0760296d627e130106a9c83b96052b5ee166ee1fd672b4f326d5a9d71eb7c7422f6e596291fa21b169101aa0af0e9e152f2b2d698aa4f7929510aa18ab6f8878ca235daf434ef62497eb6b4202afe7da34ec465e0564dcaa24ed999a2019254aba5475a19c8e3bc2ebbee2ba935bf13dea58f4f65bc60e44a28cd28fc9f399684dacc0ea2b61215e19b620d923085283d56af692b4614e23815ece01ed82d4c9b441780aeaf2dfe93e2b28d18a4fa371b98b60b9ba1eba6144134f2c01b4c98337768cc336f962f5803e730ea3d8bd2c6a7795d63b22a6442f2cf7e770d31a1e3876ecf16e92e52c0abce53b6173aa6e703388c1d1ae478d651356d38ae78be383ee73fffa342b3aa4da0174b23a555d28deabefc1d92582516a7cd237c0ee1dcef2f4a877e8d23fb4d27de5184be409a01ff76d2f58e8608307c237efa0c73e5b2e6e8298ddbccec3c52b511562eb737ded393c0287d11fa96dd62ce167a0f05eacb547c6c0125f57f868f1e8568992090dcb146ed681941fd84dd16ff789af1355062b9a0edf1c708424c2b1922e6dcf6ac492774a30384ff1f2e1b03750cc57ff31037cc9dc3c04c3cdcd2a85e8927fc78110462f9f4384bfa0bc930c90c1931b6e70a11ecd9e54376a48a382c2fe3216e468ad671311a1c1fd3e708d0da149010d89edc17108c513064f9bd54ad2fc1ebeb4170d1855c3ef7d5bb8622f9ef3809a4f63e03d9d0605c4071dfe5dbc567ad2567c1429466df091d709256f629fb253f864a551a33a9ab92cf0565c2edb4ebd4bc76dde2b6bce3f283d00bec46aed457bac7a3c571e835a03d4224ae6827e5b4", 0x2a6}], 0x7}, 0x0) 18:31:26 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r3) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x13, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="04"], 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x1d, &(0x7f00000000c0)={0x0, 0x4}, 0x8) 18:31:26 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x30a}, 0x98) 18:31:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, &(0x7f00000003c0)=[@sndrcv={0x2c}], 0x2c}, 0x0) 18:31:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:27 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket(0x2, 0x10000001, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) dup2(r1, r0) 18:31:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000080), &(0x7f0000000000)=0x98) 18:31:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:27 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/181, 0xb5}, {0x0}, {0x0}, {0x0}], 0x4}, 0x42) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f0000000040)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) 18:31:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f0670ca3d702e0ae7fccf2394e3e73da60ae0d7c2936d45eb044"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x0, 0x0, 0x180}, 0x98) 18:31:27 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/181, 0xb5}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) connect$inet(r4, &(0x7f0000000040)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) 18:31:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x24, &(0x7f0000000100), &(0x7f0000000180)=0x10) 18:31:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:28 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) 18:31:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000001c0)="be", 0x1}], 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000840000000a000000000000000000080000000000000000001c00000084"], 0x6c}, 0x0) 18:31:29 executing program 5: unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 18:31:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:29 executing program 0: unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 18:31:29 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r5, 0x0, 0x8000000}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="010000007fffffff0200000000000000", @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="01d9ae26b7"], 0x4058}}, 0x0) [ 366.699970][T13362] IPVS: ftp: loaded support on port[0] = 21 [ 366.780766][T13369] IPVS: ftp: loaded support on port[0] = 21 18:31:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r3, 0x0, 0x8000000}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="01"], 0x4058}}, 0x0) 18:31:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f0670ca3d702e0ae7fccf2394e3e73da60ae0d7c2936d45eb0440d2e43351a7c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.721723][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 368.774649][T13369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:33 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r4, 0x0, 0x8000000}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="010000007fffffff0200000000000000", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="01d9ae26b7"], 0xc8}}, 0x0) 18:31:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r4, 0x0, 0x8000000}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="010000007f0100000000000000000008", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="01d9ae26b7"], 0x4058}}, 0x0) 18:31:33 executing program 5: unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 370.624192][ T984] tipc: TX() has been purged, node left! 18:31:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000660605000fff07206706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004cdfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c951e46a2a4e5dd366d3c545200475ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a507dc47ebe84a423b6a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2065c8aae6d8a297dff0445a15f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc2117c3ebe6bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e18a523d80bd0d0d703f37ca363f601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000006e7be511fe32fbc90e2364a55e9bb66ac44423d2d00fea2594e190deae46e26c596784eba9009312cca936668e7e07fe0eb1e5cad5b24395685af2c74f01a6e76eb55aed8dddf005988e4f603ef0e00a0a8f9eeccd726e503d0d1c8263ecad96b1c541b00259e87aec617f625e07455da0163fa1113ceb184b4ce708c2886fb40d085618f1f30c0c4404ef8137cb23872bc49f10e631f4dd9c46c85ce116f50232e7e6417ca540d32baee60b4e95db78f321a88301216cdf1edcc9ae3b050bdd907c6c4f5380a8f0670ca3d702e0ae7fccf2394e3e73da60ae0d7c2936d45eb0440d2e43351a7cd9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 373.248754][T13480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 373.866049][T13479] IPVS: ftp: loaded support on port[0] = 21 [ 373.866267][T13480] IPVS: ftp: loaded support on port[0] = 21 [ 374.271440][ T984] tipc: TX() has been purged, node left! 18:31:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffa3, 0x0, 0x0) 18:31:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:31:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x0, "b90004"}}}}}, 0x2e) 18:31:38 executing program 1: unshare(0x60000000) 18:31:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 376.069061][ T984] tipc: TX() has been purged, node left! 18:31:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 376.161296][T13588] IPVS: ftp: loaded support on port[0] = 21 [ 376.227943][ T984] tipc: TX() has been purged, node left! 18:31:39 executing program 5: bpf$MAP_CREATE(0x100000000000000, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x1000000}, 0x40) 18:31:39 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000000040)=""/70, 0x46}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="3958973cdaf2"}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r4, 0x0, 0x8000000}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="010000007fffffff0200000000000000", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="01d9ae26b7"], 0x4058}}, 0x0) 18:31:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) 18:31:40 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r3, &(0x7f0000000040)=0x1b, 0x20000000001) 18:31:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) 18:31:40 executing program 5: bpf$MAP_CREATE(0x100000000000000, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x1000000}, 0x40) 18:31:40 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) 18:31:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) 18:31:41 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 18:31:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:41 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:31:42 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/254, 0xfe) 18:31:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x8001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0xb4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000080)={&(0x7f0000000300)=@nl=@proc, 0x80, 0x0}, 0x12142) 18:31:42 executing program 5: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfd90, 0xfc}}], 0x31e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:31:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) clone(0x13122001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 380.111907][ T984] tipc: TX() has been purged, node left! 18:31:43 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x104) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) madvise(&(0x7f000037b000/0x2000)=nil, 0x2000, 0xb) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8000, 0x20, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7, 0xbf7, 0x28, 0x100, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2}) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x3000, 0x0, &(0x7f000001d000/0x3000)=nil) 18:31:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @empty}, 0x35) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @mss, @sack_perm, @timestamp, @mss, @timestamp, @mss, @timestamp], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 18:31:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 380.462317][ T32] audit: type=1804 audit(1595269903.410:91): pid=13719 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/99/bus" dev="sda1" ino=16378 res=1 18:31:43 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e93165bf0723270d00d300"/20, @ANYRES32, @ANYBLOB="000000000000000004000000080001007533320018000200040005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000100726f757465000000000002000000060000028000000e000000000000000600e62ae6322a5dfed8a480587144966b028c6ec136703b18468b6d56cd03e9f6dec591f5337b64b695a16af0e62ad2bb3c5d36e44383c9b721e2dc56079e2683135f475728a3fa6402659a8b50707bde6bf2fa8d574f7f3d1672e80618721135706b1048986bc60b352fd709a1b12fb3d7c6eb8789cf3607013e439f4ff7babb4a98e17039416728e9327ce05908589cc59257d2fbbbf17fa13f084e44f1a03675d7966f435a01da40cb8a6054f8d79f18ed8544f829956cfff0c19bae50fd0000000007000000000001000000000008000000000002000000000000000000010078740000000002800000010072617700000000000000000000000000000000000000000000000000000000000000060000006e6174000000000000000000000000000000000000000000000000000000000000000000320bc468f2111cb122fefeb150675df2420ddfce1587c033fdc0069e16ae63a0f7e135522cbc1fa6c746c7e3d9d182152a3191523cbc98581453c764e026694a9a892404f0f0bd280d6cb2c34e50e6872ee4f3ef000000000000ae3063de21af5a1168a8"], 0x44}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) [ 380.686517][ T32] audit: type=1804 audit(1595269903.450:92): pid=13720 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/99/bus" dev="sda1" ino=16378 res=1 18:31:43 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='H\x00', &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000140), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r3, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r4 = openat$null(0xffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x400201, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x840) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:44 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c01000010001307e0ff000000b3754464a3792e1a906eae4d91e5000000e000005d000000000000000000000000ff0100000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff7f0000010000000032000000fe8000000000000000000000000000bb00000000000000000000000000001fe40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002dc6d000000000000000000400002"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 18:31:44 executing program 5: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfd90, 0xfc}}], 0x31e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:31:44 executing program 2: socket$inet6(0xa, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, r1+10000000}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 18:31:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) 18:31:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:44 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x50) open(&(0x7f0000000000)='./bus\x00', 0x402100, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r0, r1) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 18:31:45 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 18:31:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:45 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140)={0x2, 0x20001000, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000202000005000000fbffffff0000000000000000000000d8991cbaf67bfbddb446faf063a7ad5a44a57bfaad1b62b39079d5a08bda88ab978860b934166b4c154e6e962278c008a4014295f12222a2a2e8290d2f8a20e91f1b9638b56bfddbce8e71fa457ca86112983ebb2741cef113c1b95c4de328d0ceb81838b2a02c9846c91e518252549a000000"], 0x1c}}, 0x0) dup3(r0, r1, 0x0) r2 = epoll_create1(0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 18:31:45 executing program 0: r0 = mq_open(&(0x7f0000000040)='eth0\x001\xae+!%\xac \'\x96\xb3\xbf\xfff,\xa9\xb4m\xd0\xb6\x01r\xfcVY\xbb=?\xc5\x85\xf57\xf1r:\xd2', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000380)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) mq_notify(r3, 0x0) 18:31:45 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x7a3000, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) madvise(&(0x7f0000496000/0x1000)=nil, 0x1000, 0x3) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) 18:31:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x32, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:31:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 18:31:46 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x31) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) mremap(&(0x7f000001c000/0x5000)=nil, 0x5000, 0x2000, 0x0, &(0x7f00000ce000/0x2000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0xff) 18:31:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:31:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5c}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3d) 18:31:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.030596][ T32] audit: type=1804 audit(1595269906.981:93): pid=13834 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir199306488/syzkaller.ztjUGa/103/bus" dev="sda1" ino=16384 res=1 18:31:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) 18:31:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfec8) r6 = socket$inet6(0xa, 0x200000000003, 0x7f) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) splice(r3, 0x0, r5, 0x0, 0x10005, 0x0) 18:31:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:47 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = gettid() tkill(r0, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='-\x00', 0xffffffffffffffff}, 0x30) r2 = gettid() tkill(r2, 0x8) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x42) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0224fc605a0000000a000400050082c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kcmp(r1, r2, 0x4, r4, r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) r6 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x68200, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000d844b37c62dbfd01000000000000007871c0a41e6304af8bd9699245245b60a811df8cdce6163dd86366a796d500"/61, @ANYRES16=r8, @ANYBLOB="0500000000000000000001000000000000000941000000000000000000000000000000000000000000000000006c58048dfeb54faae800000002000000000000000000000000006100"/86], 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xfffffbff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004011) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140)=0x2038dd, 0x4) 18:31:47 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = getpid() tkill(r0, 0x21) 18:31:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x200fff) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 18:31:48 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="3052c4ed343cd3170001"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x7ffffffd, 0x0) 18:31:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 18:31:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:48 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="ec", 0x1}], 0x1}}], 0x1, 0x0) 18:31:48 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x3003, 0x0, 0x148, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) 18:31:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0xd0, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, {0x0, 0x4e22, 0xa6, 0x0, @gue={{0x2}, "f03ea84c5153ee4696e6b402d83eb987805001be798d545552efb1e2f6f06c64143c04457f217f946f17e65afba21d48afea0da4b20cf309392182abd77877b7c112523ef3bbea78b2660133460fa447dd0efd29835fdc54a3f492c44d75e3fa195ca765317127d75075462d70d93d46fe10beeae95eac7d920d31f0a440d6692aafe79af8707a9416ef17e866129265eeb6f03808f6c95f31445ecc0899"}}}}}}, 0x0) shutdown(r0, 0x0) 18:31:48 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./bus\x00') 18:31:48 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3d) 18:31:49 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) creat(0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)) 18:31:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r3, 0x0, 0x200fff) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 18:31:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5c, 0x0, 0xfffffffe}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3d) 18:31:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 18:31:49 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) 18:31:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:50 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x4f6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() tkill(r0, 0x21) prctl$PR_SET_THP_DISABLE(0x29, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:31:50 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 18:31:50 executing program 2: syz_emit_ethernet(0x52, &(0x7f0000001540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60077e00000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) 18:31:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:50 executing program 0: mkdir(&(0x7f0000000700)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) readv(r4, &(0x7f0000000680)=[{&(0x7f0000000480)=""/255, 0xff}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) 18:31:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x178, 0x150, 0x150, 0x0, 0x0, 0x250, 0x238, 0x238, 0x250, 0x238, 0x3, 0x0, {[{{@ipv6={@empty, @dev, [], [], 'team0\x00', 'vcan0\x00'}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = gettid() tkill(r1, 0x40) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) 18:31:50 executing program 2: mkdir(&(0x7f0000000700)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000480)=""/255, 0xff}], 0x1) 18:31:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0x2c7dd650e3177381, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 18:31:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004843, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 18:31:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0x0, 0x98, 0x98, 0x98, 0x178, 0x240, 0x288, 0x288, 0x288, 0x240, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'wg1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "06f24c0a86413278ce17ac6780403e8c7c8c3b0690c15f43b1febb5dd7cd8f314206e49e917657172af5b25658fe9b837a2af6d828ff6cead319ca783b48654b04107bf217ce1186ec35cdb0ff14aeb651f1948070d4b5dc97216c98028063ed1d758c6c28b787d4b7fc3ca653951182de43fa9bb898cd2f266546deda9e9e26", 0x5e}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 18:31:51 executing program 4: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) 18:31:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:51 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:31:51 executing program 1: 18:31:52 executing program 2: 18:31:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:52 executing program 4: r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce(\xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87z\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\xfa\xa5\xb7\xd6\xa5&);\x1br\xd2a\xf2\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca<\x04\xaf\x04\x9a\x9d\x84\xa5\x94J>F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f\'\xba\x12', 0x0) pwrite64(r0, &(0x7f0000000800)="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", 0x101, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000000c0)='./file0/file0/../file0\x00', r1, &(0x7f0000000100)='./file1\x00') 18:31:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:52 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x100000000}) 18:31:52 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x4}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd601bfc8e004d8800fe800000000000000000000000000000ff020000000000000000000000000001e2ff4e20004ca6"], 0x0) 18:31:52 executing program 2: clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x130, 0x130, 0x320, 0x448, 0x0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'dummy0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xf6}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'veth1_to_team\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'team_slave_0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) 18:31:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:52 executing program 2: 18:31:52 executing program 4: 18:31:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:52 executing program 1: 18:31:52 executing program 0: 18:31:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:53 executing program 2: 18:31:53 executing program 1: 18:31:53 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='M'], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f0000000080), 0x1000ffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) 18:31:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:53 executing program 0: 18:31:53 executing program 2: 18:31:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:53 executing program 1: 18:31:54 executing program 0: 18:31:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:54 executing program 2: 18:31:54 executing program 1: 18:31:54 executing program 0: 18:31:54 executing program 4: 18:31:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:54 executing program 2: 18:31:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:54 executing program 1: 18:31:54 executing program 0: 18:31:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:55 executing program 2: 18:31:55 executing program 4: 18:31:55 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:55 executing program 1: 18:31:55 executing program 0: 18:31:55 executing program 2: 18:31:55 executing program 4: 18:31:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:55 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:55 executing program 1: 18:31:55 executing program 0: 18:31:56 executing program 2: 18:31:56 executing program 4: 18:31:56 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:56 executing program 1: 18:31:56 executing program 0: 18:31:56 executing program 2: 18:31:56 executing program 4: 18:31:56 executing program 1: 18:31:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:56 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:56 executing program 0: 18:31:56 executing program 2: 18:31:57 executing program 4: 18:31:57 executing program 1: 18:31:57 executing program 0: 18:31:57 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:57 executing program 2: 18:31:57 executing program 4: 18:31:57 executing program 1: 18:31:57 executing program 0: 18:31:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:58 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:58 executing program 2: 18:31:58 executing program 4: 18:31:58 executing program 0: 18:31:58 executing program 1: 18:31:58 executing program 1: 18:31:58 executing program 0: 18:31:58 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:58 executing program 4: 18:31:58 executing program 2: 18:31:58 executing program 1: 18:31:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:59 executing program 0: 18:31:59 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:59 executing program 4: 18:31:59 executing program 2: 18:31:59 executing program 1: 18:31:59 executing program 0: 18:31:59 executing program 4: 18:31:59 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:31:59 executing program 2: 18:31:59 executing program 1: 18:31:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:59 executing program 4: 18:31:59 executing program 0: 18:32:00 executing program 2: 18:32:00 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158) 18:32:00 executing program 1: 18:32:00 executing program 4: 18:32:00 executing program 0: 18:32:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:32:00 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 18:32:00 executing program 2: 18:32:00 executing program 1: 18:32:00 executing program 4: 18:32:00 executing program 0: 18:32:00 executing program 2: 18:32:00 executing program 1: 18:32:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:32:00 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 18:32:01 executing program 4: 18:32:01 executing program 0: 18:32:01 executing program 2: 18:32:01 executing program 1: 18:32:01 executing program 4: 18:32:01 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 18:32:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:32:01 executing program 0: 18:32:01 executing program 1: 18:32:01 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[]]}, 0x158) 18:32:01 executing program 2: 18:32:01 executing program 4: 18:32:01 executing program 0: 18:32:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:32:02 executing program 1: 18:32:02 executing program 4: 18:32:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [{}]}, 0x54) 18:32:02 executing program 2: 18:32:02 executing program 0: 18:32:02 executing program 1: 18:32:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x202, 0x0) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [{}]}, 0x54) 18:32:02 executing program 2: 18:32:02 executing program 4: 18:32:02 executing program 3: 18:32:02 executing program 0: 18:32:02 executing program 1: 18:32:03 executing program 3: 18:32:03 executing program 2: 18:32:03 executing program 5: 18:32:03 executing program 4: 18:32:03 executing program 1: 18:32:03 executing program 3: 18:32:03 executing program 0: 18:32:03 executing program 5: 18:32:03 executing program 4: 18:32:03 executing program 2: 18:32:03 executing program 1: 18:32:03 executing program 0: 18:32:03 executing program 3: 18:32:03 executing program 2: 18:32:03 executing program 5: 18:32:04 executing program 1: 18:32:04 executing program 4: 18:32:04 executing program 3: 18:32:04 executing program 0: 18:32:04 executing program 4: 18:32:04 executing program 2: 18:32:04 executing program 5: 18:32:04 executing program 1: 18:32:04 executing program 0: 18:32:04 executing program 3: 18:32:04 executing program 4: 18:32:04 executing program 2: 18:32:04 executing program 1: 18:32:04 executing program 5: 18:32:04 executing program 0: 18:32:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 18:32:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:32:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) 18:32:05 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) renameat(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0/file0\x00') 18:32:05 executing program 0: 18:32:05 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 402.551967][T14365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:32:05 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x210}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xfd90, 0xfc}}], 0x31e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:32:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) 18:32:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00'}) [ 402.864622][T14368] not chained 10000 origins [ 402.869160][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 402.877809][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.887844][T14368] Call Trace: [ 402.891125][T14368] dump_stack+0x1df/0x240 [ 402.895448][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 402.901156][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 402.906946][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 402.913006][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 402.917772][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 402.922867][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 402.928400][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 402.934460][T14368] ? _copy_from_user+0x15b/0x260 [ 402.939384][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 402.944489][T14368] __msan_chain_origin+0x50/0x90 [ 402.949417][T14368] __get_compat_msghdr+0x5be/0x890 [ 402.954525][T14368] get_compat_msghdr+0x108/0x270 [ 402.959459][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 402.963955][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 402.969582][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 402.974678][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 402.980295][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 402.985569][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 402.990315][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 402.995063][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 403.000255][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.004925][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.010980][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 403.017208][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.023348][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.028537][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.033398][T14368] do_SYSENTER_32+0x73/0x90 [ 403.037888][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.044197][T14368] RIP: 0023:0xf7f77549 [ 403.048248][T14368] Code: Bad RIP value. [ 403.052296][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 403.060689][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 403.068645][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 403.076600][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.084555][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 403.092509][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.100475][T14368] Uninit was stored to memory at: [ 403.105482][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 403.111185][T14368] __msan_chain_origin+0x50/0x90 [ 403.116106][T14368] __get_compat_msghdr+0x5be/0x890 [ 403.121199][T14368] get_compat_msghdr+0x108/0x270 [ 403.126122][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 403.130608][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.135265][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.141313][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.147450][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.152644][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.157480][T14368] do_SYSENTER_32+0x73/0x90 [ 403.161964][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.168264][T14368] [ 403.170570][T14368] Uninit was stored to memory at: [ 403.175579][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 403.181281][T14368] __msan_chain_origin+0x50/0x90 [ 403.186219][T14368] __get_compat_msghdr+0x5be/0x890 [ 403.191313][T14368] get_compat_msghdr+0x108/0x270 [ 403.196234][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 403.200732][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.205390][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.211438][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.217575][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.222754][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.227588][T14368] do_SYSENTER_32+0x73/0x90 [ 403.232073][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.238373][T14368] [ 403.240680][T14368] Uninit was stored to memory at: [ 403.245685][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 403.251387][T14368] __msan_chain_origin+0x50/0x90 [ 403.256306][T14368] __get_compat_msghdr+0x5be/0x890 [ 403.261401][T14368] get_compat_msghdr+0x108/0x270 [ 403.266322][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 403.270909][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.275575][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.281621][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.287756][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.292942][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.297776][T14368] do_SYSENTER_32+0x73/0x90 [ 403.302261][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.308564][T14368] [ 403.310872][T14368] Uninit was stored to memory at: [ 403.315877][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 403.321578][T14368] __msan_chain_origin+0x50/0x90 [ 403.326498][T14368] __get_compat_msghdr+0x5be/0x890 [ 403.331592][T14368] get_compat_msghdr+0x108/0x270 [ 403.336514][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 403.340999][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.345659][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.351705][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.357841][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.363039][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.367878][T14368] do_SYSENTER_32+0x73/0x90 [ 403.372452][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.378770][T14368] [ 403.381086][T14368] Uninit was stored to memory at: [ 403.386114][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 403.391819][T14368] __msan_chain_origin+0x50/0x90 [ 403.396743][T14368] __get_compat_msghdr+0x5be/0x890 [ 403.401842][T14368] get_compat_msghdr+0x108/0x270 [ 403.406766][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 403.411257][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.415913][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.421964][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.428100][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.433281][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.438113][T14368] do_SYSENTER_32+0x73/0x90 [ 403.442601][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.448903][T14368] [ 403.451211][T14368] Uninit was stored to memory at: [ 403.456222][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 403.461922][T14368] __msan_chain_origin+0x50/0x90 [ 403.466843][T14368] __get_compat_msghdr+0x5be/0x890 [ 403.471937][T14368] get_compat_msghdr+0x108/0x270 [ 403.476858][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 403.481342][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.486001][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 403.492049][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.498182][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.503364][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.508198][T14368] do_SYSENTER_32+0x73/0x90 [ 403.512682][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.518983][T14368] [ 403.521292][T14368] Uninit was stored to memory at: [ 403.526297][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 403.531996][T14368] __msan_chain_origin+0x50/0x90 [ 403.536918][T14368] __get_compat_msghdr+0x5be/0x890 [ 403.542011][T14368] get_compat_msghdr+0x108/0x270 [ 403.546936][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 403.551423][T14368] __sys_recvmmsg+0x4ca/0x510 [ 403.556078][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 18:32:06 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "fcea2a2961b446034f1da88a"}, 0xff17, 0x1) [ 403.562123][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 403.568258][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 403.573439][T14368] do_fast_syscall_32+0x6b/0xd0 [ 403.578275][T14368] do_SYSENTER_32+0x73/0x90 [ 403.582760][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 403.589060][T14368] [ 403.591369][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 403.598027][T14368] do_recvmmsg+0xc5/0x1ee0 [ 403.602425][T14368] do_recvmmsg+0xc5/0x1ee0 18:32:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:32:07 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 18:32:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)) 18:32:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futimesat(0xffffffffffffffff, 0x0, 0x0) 18:32:07 executing program 2: syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}]}) 18:32:07 executing program 1: syz_mount_image$iso9660(&(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 18:32:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 405.482815][T14368] not chained 20000 origins [ 405.487364][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 405.496029][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.506172][T14368] Call Trace: [ 405.509480][T14368] dump_stack+0x1df/0x240 [ 405.513823][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 405.519555][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 405.525388][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 405.531466][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 405.536271][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 405.541392][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 405.546949][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 405.553024][T14368] ? _copy_from_user+0x15b/0x260 [ 405.557964][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 405.563097][T14368] __msan_chain_origin+0x50/0x90 [ 405.568161][T14368] __get_compat_msghdr+0x5be/0x890 [ 405.573290][T14368] get_compat_msghdr+0x108/0x270 [ 405.578246][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 405.582766][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 405.588423][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 405.593544][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 405.599190][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 405.604483][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 405.609250][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 405.614023][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 405.619234][T14368] __sys_recvmmsg+0x4ca/0x510 [ 405.623929][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 405.630013][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 405.636269][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 405.642437][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 405.647658][T14368] do_fast_syscall_32+0x6b/0xd0 [ 405.652524][T14368] do_SYSENTER_32+0x73/0x90 [ 405.657042][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.663373][T14368] RIP: 0023:0xf7f77549 [ 405.667431][T14368] Code: Bad RIP value. [ 405.671496][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 405.679911][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 405.687884][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 405.695860][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.703842][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 405.711817][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.719802][T14368] Uninit was stored to memory at: [ 405.724841][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 405.730564][T14368] __msan_chain_origin+0x50/0x90 [ 405.735511][T14368] __get_compat_msghdr+0x5be/0x890 [ 405.740630][T14368] get_compat_msghdr+0x108/0x270 [ 405.745575][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 405.750085][T14368] __sys_recvmmsg+0x4ca/0x510 [ 405.754764][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 405.760833][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 405.767006][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 405.772212][T14368] do_fast_syscall_32+0x6b/0xd0 [ 405.777070][T14368] do_SYSENTER_32+0x73/0x90 [ 405.781576][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.787895][T14368] [ 405.790223][T14368] Uninit was stored to memory at: [ 405.795257][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 405.800988][T14368] __msan_chain_origin+0x50/0x90 [ 405.805940][T14368] __get_compat_msghdr+0x5be/0x890 [ 405.811059][T14368] get_compat_msghdr+0x108/0x270 [ 405.816010][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 405.820514][T14368] __sys_recvmmsg+0x4ca/0x510 [ 405.825191][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 405.831259][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 405.837401][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 405.842584][T14368] do_fast_syscall_32+0x6b/0xd0 [ 405.847421][T14368] do_SYSENTER_32+0x73/0x90 [ 405.851909][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.858211][T14368] [ 405.860519][T14368] Uninit was stored to memory at: [ 405.865526][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 405.871225][T14368] __msan_chain_origin+0x50/0x90 [ 405.876145][T14368] __get_compat_msghdr+0x5be/0x890 [ 405.881242][T14368] get_compat_msghdr+0x108/0x270 [ 405.886161][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 405.890656][T14368] __sys_recvmmsg+0x4ca/0x510 [ 405.895332][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 405.901379][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 405.907520][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 405.912703][T14368] do_fast_syscall_32+0x6b/0xd0 [ 405.917538][T14368] do_SYSENTER_32+0x73/0x90 [ 405.922023][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.928326][T14368] [ 405.930635][T14368] Uninit was stored to memory at: [ 405.935642][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 405.941341][T14368] __msan_chain_origin+0x50/0x90 [ 405.946264][T14368] __get_compat_msghdr+0x5be/0x890 [ 405.951356][T14368] get_compat_msghdr+0x108/0x270 [ 405.956276][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 405.960760][T14368] __sys_recvmmsg+0x4ca/0x510 [ 405.965420][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 405.971468][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 405.977604][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 405.982787][T14368] do_fast_syscall_32+0x6b/0xd0 [ 405.987619][T14368] do_SYSENTER_32+0x73/0x90 [ 405.992107][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 405.998408][T14368] [ 406.000717][T14368] Uninit was stored to memory at: [ 406.005724][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 406.011427][T14368] __msan_chain_origin+0x50/0x90 [ 406.016346][T14368] __get_compat_msghdr+0x5be/0x890 [ 406.021458][T14368] get_compat_msghdr+0x108/0x270 [ 406.026377][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 406.030863][T14368] __sys_recvmmsg+0x4ca/0x510 [ 406.035522][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 406.041572][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 406.047708][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 406.052890][T14368] do_fast_syscall_32+0x6b/0xd0 [ 406.057724][T14368] do_SYSENTER_32+0x73/0x90 [ 406.062207][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 406.068509][T14368] [ 406.070828][T14368] Uninit was stored to memory at: [ 406.075857][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 406.081560][T14368] __msan_chain_origin+0x50/0x90 [ 406.086480][T14368] __get_compat_msghdr+0x5be/0x890 [ 406.091575][T14368] get_compat_msghdr+0x108/0x270 [ 406.096497][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 406.100989][T14368] __sys_recvmmsg+0x4ca/0x510 [ 406.105645][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 406.111691][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 406.117824][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 406.123006][T14368] do_fast_syscall_32+0x6b/0xd0 [ 406.127841][T14368] do_SYSENTER_32+0x73/0x90 [ 406.132324][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 406.138625][T14368] [ 406.140931][T14368] Uninit was stored to memory at: [ 406.145935][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 406.151634][T14368] __msan_chain_origin+0x50/0x90 [ 406.156572][T14368] __get_compat_msghdr+0x5be/0x890 [ 406.161674][T14368] get_compat_msghdr+0x108/0x270 [ 406.166592][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 406.171075][T14368] __sys_recvmmsg+0x4ca/0x510 [ 406.175733][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 406.181781][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 406.187918][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 406.193099][T14368] do_fast_syscall_32+0x6b/0xd0 [ 406.197946][T14368] do_SYSENTER_32+0x73/0x90 [ 406.202435][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 406.208746][T14368] [ 406.211061][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 406.217727][T14368] do_recvmmsg+0xc5/0x1ee0 [ 406.222130][T14368] do_recvmmsg+0xc5/0x1ee0 [ 406.786805][T14368] not chained 30000 origins [ 406.791350][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 406.800052][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.810105][T14368] Call Trace: [ 406.813404][T14368] dump_stack+0x1df/0x240 [ 406.817744][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 406.823469][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 406.829311][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 406.835383][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 406.840174][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 406.845296][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 406.850852][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 406.856931][T14368] ? _copy_from_user+0x15b/0x260 [ 406.861873][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 406.866998][T14368] __msan_chain_origin+0x50/0x90 [ 406.871953][T14368] __get_compat_msghdr+0x5be/0x890 [ 406.877109][T14368] get_compat_msghdr+0x108/0x270 [ 406.882062][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 406.886574][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 406.892226][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 406.897342][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 406.902978][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 406.908278][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 406.913046][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 406.917931][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 406.923141][T14368] __sys_recvmmsg+0x4ca/0x510 [ 406.927842][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 406.933920][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 406.940169][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 406.946327][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 406.951542][T14368] do_fast_syscall_32+0x6b/0xd0 [ 406.956405][T14368] do_SYSENTER_32+0x73/0x90 [ 406.960919][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 406.967245][T14368] RIP: 0023:0xf7f77549 [ 406.971309][T14368] Code: Bad RIP value. [ 406.975375][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 406.983787][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 406.991760][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 406.999734][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.007704][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 407.015676][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.023658][T14368] Uninit was stored to memory at: [ 407.028691][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 407.034417][T14368] __msan_chain_origin+0x50/0x90 [ 407.039365][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.044484][T14368] get_compat_msghdr+0x108/0x270 [ 407.049426][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.053939][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.058619][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.064687][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.070840][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.076040][T14368] do_fast_syscall_32+0x6b/0xd0 [ 407.080893][T14368] do_SYSENTER_32+0x73/0x90 [ 407.085408][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.091719][T14368] [ 407.094040][T14368] Uninit was stored to memory at: [ 407.099067][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 407.104791][T14368] __msan_chain_origin+0x50/0x90 [ 407.109740][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.114858][T14368] get_compat_msghdr+0x108/0x270 [ 407.119807][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.124311][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.129006][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.135070][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.141227][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.146427][T14368] do_fast_syscall_32+0x6b/0xd0 [ 407.151278][T14368] do_SYSENTER_32+0x73/0x90 [ 407.155779][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.162098][T14368] [ 407.164424][T14368] Uninit was stored to memory at: [ 407.169457][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 407.175172][T14368] __msan_chain_origin+0x50/0x90 [ 407.180114][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.185233][T14368] get_compat_msghdr+0x108/0x270 [ 407.190181][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.194685][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.199365][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.205435][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.211595][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.216793][T14368] do_fast_syscall_32+0x6b/0xd0 [ 407.221733][T14368] do_SYSENTER_32+0x73/0x90 [ 407.226243][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.232568][T14368] [ 407.234892][T14368] Uninit was stored to memory at: [ 407.239922][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 407.245646][T14368] __msan_chain_origin+0x50/0x90 [ 407.250597][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.255711][T14368] get_compat_msghdr+0x108/0x270 [ 407.260654][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.265171][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.269851][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.275918][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.282072][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.287276][T14368] do_fast_syscall_32+0x6b/0xd0 [ 407.292133][T14368] do_SYSENTER_32+0x73/0x90 [ 407.296635][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.302948][T14368] [ 407.305274][T14368] Uninit was stored to memory at: [ 407.310301][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 407.316014][T14368] __msan_chain_origin+0x50/0x90 [ 407.320949][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.326070][T14368] get_compat_msghdr+0x108/0x270 [ 407.331022][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.335530][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.340214][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.346283][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.352441][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.357644][T14368] do_fast_syscall_32+0x6b/0xd0 [ 407.362510][T14368] do_SYSENTER_32+0x73/0x90 [ 407.367020][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.373335][T14368] [ 407.375654][T14368] Uninit was stored to memory at: [ 407.380684][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 407.386408][T14368] __msan_chain_origin+0x50/0x90 [ 407.391355][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.396473][T14368] get_compat_msghdr+0x108/0x270 [ 407.401414][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.405915][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.410595][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.416663][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.422821][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.428024][T14368] do_fast_syscall_32+0x6b/0xd0 [ 407.432882][T14368] do_SYSENTER_32+0x73/0x90 [ 407.437389][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.443705][T14368] [ 407.446024][T14368] Uninit was stored to memory at: [ 407.451051][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 407.456770][T14368] __msan_chain_origin+0x50/0x90 [ 407.461707][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.466824][T14368] get_compat_msghdr+0x108/0x270 [ 407.471767][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.476275][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.480957][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.487037][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.493192][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.498400][T14368] do_fast_syscall_32+0x6b/0xd0 [ 407.503256][T14368] do_SYSENTER_32+0x73/0x90 [ 407.507758][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 407.514072][T14368] [ 407.516400][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 407.523078][T14368] do_recvmmsg+0xc5/0x1ee0 [ 407.527502][T14368] do_recvmmsg+0xc5/0x1ee0 [ 407.832066][T14368] not chained 40000 origins [ 407.836610][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 407.845285][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.855346][T14368] Call Trace: [ 407.858646][T14368] dump_stack+0x1df/0x240 [ 407.862996][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 407.868729][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 407.874542][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 407.880621][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 407.885412][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 407.890533][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 407.896083][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 407.902166][T14368] ? _copy_from_user+0x15b/0x260 [ 407.907108][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 407.912225][T14368] __msan_chain_origin+0x50/0x90 [ 407.917170][T14368] __get_compat_msghdr+0x5be/0x890 [ 407.922302][T14368] get_compat_msghdr+0x108/0x270 [ 407.927277][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 407.931793][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 407.937443][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 407.942559][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 407.948199][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 407.953490][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 407.958257][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 407.963037][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 407.968242][T14368] __sys_recvmmsg+0x4ca/0x510 [ 407.972932][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 407.979009][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 407.985250][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 407.991409][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 407.996615][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.001471][T14368] do_SYSENTER_32+0x73/0x90 [ 408.005974][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.012304][T14368] RIP: 0023:0xf7f77549 [ 408.016366][T14368] Code: Bad RIP value. [ 408.020425][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 408.028835][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 408.036802][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 408.044770][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.052742][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 408.060718][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.068697][T14368] Uninit was stored to memory at: [ 408.073727][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 408.079458][T14368] __msan_chain_origin+0x50/0x90 [ 408.084399][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.089513][T14368] get_compat_msghdr+0x108/0x270 [ 408.094450][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 408.098950][T14368] __sys_recvmmsg+0x4ca/0x510 [ 408.103622][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 408.109751][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 408.115882][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 408.121204][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.126126][T14368] do_SYSENTER_32+0x73/0x90 [ 408.130638][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.136960][T14368] [ 408.139300][T14368] Uninit was stored to memory at: [ 408.144325][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 408.150065][T14368] __msan_chain_origin+0x50/0x90 [ 408.155009][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.160124][T14368] get_compat_msghdr+0x108/0x270 [ 408.165063][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 408.169565][T14368] __sys_recvmmsg+0x4ca/0x510 [ 408.174244][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 408.180315][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 408.186472][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 408.191675][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.196581][T14368] do_SYSENTER_32+0x73/0x90 [ 408.201091][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.207420][T14368] [ 408.209745][T14368] Uninit was stored to memory at: [ 408.214778][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 408.220502][T14368] __msan_chain_origin+0x50/0x90 [ 408.225446][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.230561][T14368] get_compat_msghdr+0x108/0x270 [ 408.235501][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 408.240002][T14368] __sys_recvmmsg+0x4ca/0x510 [ 408.244689][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 408.250755][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 408.256916][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 408.262112][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.266960][T14368] do_SYSENTER_32+0x73/0x90 [ 408.271458][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.277775][T14368] [ 408.280096][T14368] Uninit was stored to memory at: [ 408.285110][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 408.290803][T14368] __msan_chain_origin+0x50/0x90 [ 408.295730][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.300816][T14368] get_compat_msghdr+0x108/0x270 [ 408.305728][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 408.310209][T14368] __sys_recvmmsg+0x4ca/0x510 [ 408.314871][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 408.320909][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 408.327071][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 408.332260][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.337083][T14368] do_SYSENTER_32+0x73/0x90 [ 408.341559][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.347852][T14368] [ 408.350153][T14368] Uninit was stored to memory at: [ 408.355152][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 408.360846][T14368] __msan_chain_origin+0x50/0x90 [ 408.365757][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.370853][T14368] get_compat_msghdr+0x108/0x270 [ 408.375775][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 408.380273][T14368] __sys_recvmmsg+0x4ca/0x510 [ 408.384925][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 408.390967][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 408.397216][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 408.402389][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.407217][T14368] do_SYSENTER_32+0x73/0x90 [ 408.411694][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.417986][T14368] [ 408.420289][T14368] Uninit was stored to memory at: [ 408.425322][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 408.431012][T14368] __msan_chain_origin+0x50/0x90 [ 408.435921][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.441007][T14368] get_compat_msghdr+0x108/0x270 [ 408.445914][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 408.450390][T14368] __sys_recvmmsg+0x4ca/0x510 [ 408.455042][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 408.461081][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 408.467226][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 408.472407][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.477234][T14368] do_SYSENTER_32+0x73/0x90 [ 408.481709][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.488002][T14368] [ 408.490301][T14368] Uninit was stored to memory at: [ 408.495299][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 408.500990][T14368] __msan_chain_origin+0x50/0x90 [ 408.505902][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.511024][T14368] get_compat_msghdr+0x108/0x270 [ 408.515934][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 408.520411][T14368] __sys_recvmmsg+0x4ca/0x510 [ 408.525060][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 408.531099][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 408.537228][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 408.542400][T14368] do_fast_syscall_32+0x6b/0xd0 [ 408.547222][T14368] do_SYSENTER_32+0x73/0x90 [ 408.551717][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 408.558008][T14368] [ 408.560309][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 408.566967][T14368] do_recvmmsg+0xc5/0x1ee0 [ 408.571378][T14368] do_recvmmsg+0xc5/0x1ee0 [ 408.903066][T14368] not chained 50000 origins [ 408.907604][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 408.916260][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.926305][T14368] Call Trace: [ 408.929592][T14368] dump_stack+0x1df/0x240 [ 408.933915][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 408.939620][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 408.945411][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 408.951464][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 408.956236][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 408.961335][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 408.966870][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 408.972926][T14368] ? _copy_from_user+0x15b/0x260 [ 408.977850][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 408.982948][T14368] __msan_chain_origin+0x50/0x90 [ 408.987878][T14368] __get_compat_msghdr+0x5be/0x890 [ 408.992988][T14368] get_compat_msghdr+0x108/0x270 [ 408.997922][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.002418][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 409.008050][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 409.013145][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 409.018764][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 409.024038][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 409.028790][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 409.033538][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 409.038724][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.043414][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.049486][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 409.055712][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.061852][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.067045][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.071883][T14368] do_SYSENTER_32+0x73/0x90 [ 409.076373][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.082684][T14368] RIP: 0023:0xf7f77549 [ 409.086747][T14368] Code: Bad RIP value. [ 409.090883][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 409.099277][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 409.107232][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 409.115185][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.123138][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 409.131180][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.139171][T14368] Uninit was stored to memory at: [ 409.144183][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 409.149886][T14368] __msan_chain_origin+0x50/0x90 [ 409.154807][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.159901][T14368] get_compat_msghdr+0x108/0x270 [ 409.164820][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.169305][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.173965][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.180016][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.186151][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.191334][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.196166][T14368] do_SYSENTER_32+0x73/0x90 [ 409.200650][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.206952][T14368] [ 409.209267][T14368] Uninit was stored to memory at: [ 409.214276][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 409.219980][T14368] __msan_chain_origin+0x50/0x90 [ 409.224904][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.230102][T14368] get_compat_msghdr+0x108/0x270 [ 409.235022][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.239507][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.244168][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.250219][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.256355][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.261536][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.266370][T14368] do_SYSENTER_32+0x73/0x90 [ 409.270857][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.277159][T14368] [ 409.279469][T14368] Uninit was stored to memory at: [ 409.284482][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 409.290182][T14368] __msan_chain_origin+0x50/0x90 [ 409.295106][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.300201][T14368] get_compat_msghdr+0x108/0x270 [ 409.305134][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.309640][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.314297][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.320361][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.326500][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.331681][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.336515][T14368] do_SYSENTER_32+0x73/0x90 [ 409.341003][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.347304][T14368] [ 409.349611][T14368] Uninit was stored to memory at: [ 409.354618][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 409.360319][T14368] __msan_chain_origin+0x50/0x90 [ 409.365258][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.370367][T14368] get_compat_msghdr+0x108/0x270 [ 409.375310][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.379806][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.384472][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.390531][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.396672][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.401856][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.406691][T14368] do_SYSENTER_32+0x73/0x90 [ 409.411177][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.417478][T14368] [ 409.419807][T14368] Uninit was stored to memory at: [ 409.424815][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 409.430536][T14368] __msan_chain_origin+0x50/0x90 [ 409.435458][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.440558][T14368] get_compat_msghdr+0x108/0x270 [ 409.445604][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.450091][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.454751][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.460823][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.467086][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.472269][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.477103][T14368] do_SYSENTER_32+0x73/0x90 [ 409.481588][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.487890][T14368] [ 409.490198][T14368] Uninit was stored to memory at: [ 409.495223][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 409.500924][T14368] __msan_chain_origin+0x50/0x90 [ 409.505845][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.510942][T14368] get_compat_msghdr+0x108/0x270 [ 409.515862][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.520348][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.525006][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.531053][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.537192][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.542373][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.547219][T14368] do_SYSENTER_32+0x73/0x90 [ 409.551704][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.558008][T14368] [ 409.560318][T14368] Uninit was stored to memory at: [ 409.565340][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 409.571075][T14368] __msan_chain_origin+0x50/0x90 [ 409.575998][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.581092][T14368] get_compat_msghdr+0x108/0x270 [ 409.586013][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.590503][T14368] __sys_recvmmsg+0x4ca/0x510 [ 409.595162][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 409.601216][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 409.607366][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 409.612549][T14368] do_fast_syscall_32+0x6b/0xd0 [ 409.617381][T14368] do_SYSENTER_32+0x73/0x90 [ 409.621866][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 409.628165][T14368] [ 409.630474][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 409.637135][T14368] do_recvmmsg+0xc5/0x1ee0 [ 409.641536][T14368] do_recvmmsg+0xc5/0x1ee0 [ 409.859699][T14368] not chained 60000 origins [ 409.864241][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 409.872905][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.882958][T14368] Call Trace: [ 409.886258][T14368] dump_stack+0x1df/0x240 [ 409.890600][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 409.902228][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 409.908047][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 409.914114][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 409.918898][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 409.924019][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 409.929572][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 409.935652][T14368] ? _copy_from_user+0x15b/0x260 [ 409.940605][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 409.945718][T14368] __msan_chain_origin+0x50/0x90 [ 409.950663][T14368] __get_compat_msghdr+0x5be/0x890 [ 409.955791][T14368] get_compat_msghdr+0x108/0x270 [ 409.960738][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 409.965258][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 409.970907][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 409.976020][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 409.981654][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 409.986942][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 409.991708][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 409.996481][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 410.001682][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.006370][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.012465][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 410.018711][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.024862][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.030068][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.034921][T14368] do_SYSENTER_32+0x73/0x90 [ 410.039411][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.045805][T14368] RIP: 0023:0xf7f77549 [ 410.049844][T14368] Code: Bad RIP value. [ 410.053888][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 410.062298][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 410.070250][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 410.078197][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.086143][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 410.094090][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.102056][T14368] Uninit was stored to memory at: [ 410.107055][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 410.112748][T14368] __msan_chain_origin+0x50/0x90 [ 410.117660][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.122744][T14368] get_compat_msghdr+0x108/0x270 [ 410.127656][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.132254][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.136904][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.142945][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.149071][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.154243][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.159068][T14368] do_SYSENTER_32+0x73/0x90 [ 410.163554][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.169872][T14368] [ 410.172176][T14368] Uninit was stored to memory at: [ 410.177177][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 410.182870][T14368] __msan_chain_origin+0x50/0x90 [ 410.187898][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.193127][T14368] get_compat_msghdr+0x108/0x270 [ 410.198082][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.202583][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.207246][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.213292][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.219426][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.224753][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.229638][T14368] do_SYSENTER_32+0x73/0x90 [ 410.234149][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.240442][T14368] [ 410.242747][T14368] Uninit was stored to memory at: [ 410.247747][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 410.253440][T14368] __msan_chain_origin+0x50/0x90 [ 410.258353][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.263437][T14368] get_compat_msghdr+0x108/0x270 [ 410.268362][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.272835][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.277487][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.283524][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.289651][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.294823][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.299733][T14368] do_SYSENTER_32+0x73/0x90 [ 410.304263][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.310558][T14368] [ 410.312859][T14368] Uninit was stored to memory at: [ 410.317857][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 410.323548][T14368] __msan_chain_origin+0x50/0x90 [ 410.328457][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.333605][T14368] get_compat_msghdr+0x108/0x270 [ 410.338516][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.343005][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.347656][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.353694][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.359817][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.364985][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.369821][T14368] do_SYSENTER_32+0x73/0x90 [ 410.374301][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.380598][T14368] [ 410.382902][T14368] Uninit was stored to memory at: [ 410.387907][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 410.393625][T14368] __msan_chain_origin+0x50/0x90 [ 410.398548][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.403634][T14368] get_compat_msghdr+0x108/0x270 [ 410.408549][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.413111][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.417763][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.423805][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.429933][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.435105][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.439929][T14368] do_SYSENTER_32+0x73/0x90 [ 410.444537][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.450970][T14368] [ 410.453277][T14368] Uninit was stored to memory at: [ 410.458278][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 410.463970][T14368] __msan_chain_origin+0x50/0x90 [ 410.468889][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.473974][T14368] get_compat_msghdr+0x108/0x270 [ 410.478887][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.483365][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.488015][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.494071][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.500237][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.505409][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.510234][T14368] do_SYSENTER_32+0x73/0x90 [ 410.514709][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.521039][T14368] [ 410.523341][T14368] Uninit was stored to memory at: [ 410.528338][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 410.534028][T14368] __msan_chain_origin+0x50/0x90 [ 410.538938][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.544021][T14368] get_compat_msghdr+0x108/0x270 [ 410.548933][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.553428][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.558081][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.564120][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.570248][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.575419][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.580257][T14368] do_SYSENTER_32+0x73/0x90 [ 410.584731][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.591025][T14368] [ 410.593327][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 410.599975][T14368] do_recvmmsg+0xc5/0x1ee0 [ 410.604360][T14368] do_recvmmsg+0xc5/0x1ee0 [ 410.781713][T14368] not chained 70000 origins [ 410.786259][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 410.794920][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.804970][T14368] Call Trace: [ 410.808266][T14368] dump_stack+0x1df/0x240 [ 410.812605][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 410.818323][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 410.824134][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 410.830203][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 410.834988][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 410.840106][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 410.845657][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 410.851717][T14368] ? _copy_from_user+0x15b/0x260 [ 410.856634][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 410.861721][T14368] __msan_chain_origin+0x50/0x90 [ 410.866636][T14368] __get_compat_msghdr+0x5be/0x890 [ 410.871730][T14368] get_compat_msghdr+0x108/0x270 [ 410.876648][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 410.881184][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 410.886840][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 410.891925][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 410.897532][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 410.902906][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 410.907645][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 410.912384][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 410.917559][T14368] __sys_recvmmsg+0x4ca/0x510 [ 410.922218][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 410.928349][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 410.934562][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 410.940694][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 410.945870][T14368] do_fast_syscall_32+0x6b/0xd0 [ 410.950710][T14368] do_SYSENTER_32+0x73/0x90 [ 410.955188][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 410.961486][T14368] RIP: 0023:0xf7f77549 [ 410.965545][T14368] Code: Bad RIP value. [ 410.969583][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 410.978000][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 410.985945][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 410.993891][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.001837][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 411.009782][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.017733][T14368] Uninit was stored to memory at: [ 411.022730][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.028423][T14368] __msan_chain_origin+0x50/0x90 [ 411.033350][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.038433][T14368] get_compat_msghdr+0x108/0x270 [ 411.043345][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.047855][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.052505][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.058545][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.064671][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.069843][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.074667][T14368] do_SYSENTER_32+0x73/0x90 [ 411.079156][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.085474][T14368] [ 411.087775][T14368] Uninit was stored to memory at: [ 411.092773][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.098466][T14368] __msan_chain_origin+0x50/0x90 [ 411.103377][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.108464][T14368] get_compat_msghdr+0x108/0x270 [ 411.113388][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.117873][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.122518][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.128558][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.134683][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.139854][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.144679][T14368] do_SYSENTER_32+0x73/0x90 [ 411.149153][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.155448][T14368] [ 411.157746][T14368] Uninit was stored to memory at: [ 411.162746][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.168438][T14368] __msan_chain_origin+0x50/0x90 [ 411.173356][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.178440][T14368] get_compat_msghdr+0x108/0x270 [ 411.183372][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.187849][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.192497][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.198535][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.204658][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.209841][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.214669][T14368] do_SYSENTER_32+0x73/0x90 [ 411.219154][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.225452][T14368] [ 411.227758][T14368] Uninit was stored to memory at: [ 411.232760][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.238452][T14368] __msan_chain_origin+0x50/0x90 [ 411.243369][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.248455][T14368] get_compat_msghdr+0x108/0x270 [ 411.253459][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.257941][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.262591][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.268630][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.274759][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.279940][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.284765][T14368] do_SYSENTER_32+0x73/0x90 [ 411.289244][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.295537][T14368] [ 411.297836][T14368] Uninit was stored to memory at: [ 411.302835][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.308527][T14368] __msan_chain_origin+0x50/0x90 [ 411.313439][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.318526][T14368] get_compat_msghdr+0x108/0x270 [ 411.323435][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.328061][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.332709][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.338834][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.344958][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.350129][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.354953][T14368] do_SYSENTER_32+0x73/0x90 [ 411.359428][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.365723][T14368] [ 411.368022][T14368] Uninit was stored to memory at: [ 411.373035][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.378734][T14368] __msan_chain_origin+0x50/0x90 [ 411.383653][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.388744][T14368] get_compat_msghdr+0x108/0x270 [ 411.393657][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.398143][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.402794][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.408835][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.414962][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.420224][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.425048][T14368] do_SYSENTER_32+0x73/0x90 [ 411.429526][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.435818][T14368] [ 411.438120][T14368] Uninit was stored to memory at: [ 411.443205][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.448897][T14368] __msan_chain_origin+0x50/0x90 [ 411.453807][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.458892][T14368] get_compat_msghdr+0x108/0x270 [ 411.463802][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.468278][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.472927][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.478964][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.485089][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.490262][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.495084][T14368] do_SYSENTER_32+0x73/0x90 [ 411.499562][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.505861][T14368] [ 411.508164][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 411.514811][T14368] do_recvmmsg+0xc5/0x1ee0 [ 411.519200][T14368] do_recvmmsg+0xc5/0x1ee0 [ 411.695645][T14368] not chained 80000 origins [ 411.700186][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 411.708851][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.718900][T14368] Call Trace: [ 411.722195][T14368] dump_stack+0x1df/0x240 [ 411.726544][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 411.732265][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 411.738073][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 411.744141][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 411.748921][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 411.754033][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 411.759580][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 411.765650][T14368] ? _copy_from_user+0x15b/0x260 [ 411.770586][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 411.775699][T14368] __msan_chain_origin+0x50/0x90 [ 411.780643][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.785769][T14368] get_compat_msghdr+0x108/0x270 [ 411.790713][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.795232][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 411.800909][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 411.805999][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 411.811632][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 411.816895][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 411.821639][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 411.826392][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 411.831566][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.836229][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.842274][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 411.848510][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.854640][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.859818][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.864643][T14368] do_SYSENTER_32+0x73/0x90 [ 411.869119][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.875417][T14368] RIP: 0023:0xf7f77549 [ 411.879460][T14368] Code: Bad RIP value. [ 411.883503][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 411.891888][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 411.899834][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 411.907782][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.915747][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 411.923692][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.931644][T14368] Uninit was stored to memory at: [ 411.936647][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 411.942339][T14368] __msan_chain_origin+0x50/0x90 [ 411.947254][T14368] __get_compat_msghdr+0x5be/0x890 [ 411.952338][T14368] get_compat_msghdr+0x108/0x270 [ 411.957250][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 411.961723][T14368] __sys_recvmmsg+0x4ca/0x510 [ 411.966393][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 411.972445][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 411.978569][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 411.983739][T14368] do_fast_syscall_32+0x6b/0xd0 [ 411.988564][T14368] do_SYSENTER_32+0x73/0x90 [ 411.993040][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 411.999333][T14368] [ 412.001633][T14368] Uninit was stored to memory at: [ 412.006633][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.012326][T14368] __msan_chain_origin+0x50/0x90 [ 412.017239][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.022322][T14368] get_compat_msghdr+0x108/0x270 [ 412.027230][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.031707][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.036357][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.042394][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.048520][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.053692][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.058514][T14368] do_SYSENTER_32+0x73/0x90 [ 412.062990][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.069282][T14368] [ 412.071583][T14368] Uninit was stored to memory at: [ 412.076601][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.082381][T14368] __msan_chain_origin+0x50/0x90 [ 412.087295][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.092399][T14368] get_compat_msghdr+0x108/0x270 [ 412.097312][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.101787][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.106439][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.112481][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.118606][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.123776][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.128636][T14368] do_SYSENTER_32+0x73/0x90 [ 412.133133][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.139429][T14368] [ 412.141729][T14368] Uninit was stored to memory at: [ 412.146729][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.152420][T14368] __msan_chain_origin+0x50/0x90 [ 412.157352][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.162473][T14368] get_compat_msghdr+0x108/0x270 [ 412.167397][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.171875][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.176525][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.182564][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.188690][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.193859][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.198680][T14368] do_SYSENTER_32+0x73/0x90 [ 412.203155][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.209455][T14368] [ 412.211766][T14368] Uninit was stored to memory at: [ 412.216912][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.222605][T14368] __msan_chain_origin+0x50/0x90 [ 412.227522][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.232607][T14368] get_compat_msghdr+0x108/0x270 [ 412.237521][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.241997][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.246649][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.252688][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.258815][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.263985][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.268808][T14368] do_SYSENTER_32+0x73/0x90 [ 412.273371][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.279664][T14368] [ 412.281965][T14368] Uninit was stored to memory at: [ 412.286967][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.292659][T14368] __msan_chain_origin+0x50/0x90 [ 412.297572][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.302656][T14368] get_compat_msghdr+0x108/0x270 [ 412.307569][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.312044][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.316694][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.322732][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.328859][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.334033][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.338868][T14368] do_SYSENTER_32+0x73/0x90 [ 412.343388][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.349682][T14368] [ 412.351982][T14368] Uninit was stored to memory at: [ 412.356981][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.362691][T14368] __msan_chain_origin+0x50/0x90 [ 412.367610][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.372699][T14368] get_compat_msghdr+0x108/0x270 [ 412.377616][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.382109][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.386763][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.392806][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.398938][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.404140][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.408968][T14368] do_SYSENTER_32+0x73/0x90 [ 412.413445][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.419739][T14368] [ 412.422042][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 412.428822][T14368] do_recvmmsg+0xc5/0x1ee0 [ 412.433215][T14368] do_recvmmsg+0xc5/0x1ee0 [ 412.624459][T14368] not chained 90000 origins [ 412.629006][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 412.637668][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.647736][T14368] Call Trace: [ 412.651042][T14368] dump_stack+0x1df/0x240 [ 412.655378][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 412.661099][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 412.666908][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 412.672976][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 412.677760][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 412.682873][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 412.688421][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 412.694494][T14368] ? _copy_from_user+0x15b/0x260 [ 412.699437][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 412.704545][T14368] __msan_chain_origin+0x50/0x90 [ 412.709473][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.714574][T14368] get_compat_msghdr+0x108/0x270 [ 412.719493][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.723979][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 412.729594][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 412.734684][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 412.740302][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 412.745563][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 412.750301][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 412.755040][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 412.760214][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.764872][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.770964][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 412.777180][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.783311][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.788488][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.793318][T14368] do_SYSENTER_32+0x73/0x90 [ 412.797798][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.804098][T14368] RIP: 0023:0xf7f77549 [ 412.808134][T14368] Code: Bad RIP value. [ 412.812173][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 412.820559][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 412.828519][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 412.836467][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.844412][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 412.852447][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.860400][T14368] Uninit was stored to memory at: [ 412.865402][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.871112][T14368] __msan_chain_origin+0x50/0x90 [ 412.876024][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.881121][T14368] get_compat_msghdr+0x108/0x270 [ 412.886033][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.890515][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.895163][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.901202][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.907329][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.912501][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.917328][T14368] do_SYSENTER_32+0x73/0x90 [ 412.921805][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.928099][T14368] [ 412.930400][T14368] Uninit was stored to memory at: [ 412.935396][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 412.941087][T14368] __msan_chain_origin+0x50/0x90 [ 412.946005][T14368] __get_compat_msghdr+0x5be/0x890 [ 412.951091][T14368] get_compat_msghdr+0x108/0x270 [ 412.956004][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 412.960480][T14368] __sys_recvmmsg+0x4ca/0x510 [ 412.965130][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 412.971169][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 412.977303][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 412.982475][T14368] do_fast_syscall_32+0x6b/0xd0 [ 412.987321][T14368] do_SYSENTER_32+0x73/0x90 [ 412.991798][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 412.998091][T14368] [ 413.000394][T14368] Uninit was stored to memory at: [ 413.005392][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.011085][T14368] __msan_chain_origin+0x50/0x90 [ 413.015998][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.021095][T14368] get_compat_msghdr+0x108/0x270 [ 413.026007][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.030483][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.035135][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.041172][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.047308][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.052478][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.057301][T14368] do_SYSENTER_32+0x73/0x90 [ 413.061777][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.068073][T14368] [ 413.070374][T14368] Uninit was stored to memory at: [ 413.075371][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.081063][T14368] __msan_chain_origin+0x50/0x90 [ 413.085997][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.091083][T14368] get_compat_msghdr+0x108/0x270 [ 413.095995][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.100478][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.105132][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.111171][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.117298][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.122467][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.127294][T14368] do_SYSENTER_32+0x73/0x90 [ 413.131793][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.138086][T14368] [ 413.140389][T14368] Uninit was stored to memory at: [ 413.145387][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.151084][T14368] __msan_chain_origin+0x50/0x90 [ 413.155997][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.161080][T14368] get_compat_msghdr+0x108/0x270 [ 413.165990][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.170467][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.175116][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.181157][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.187284][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.192456][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.197281][T14368] do_SYSENTER_32+0x73/0x90 [ 413.201758][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.208052][T14368] [ 413.210351][T14368] Uninit was stored to memory at: [ 413.215348][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.221041][T14368] __msan_chain_origin+0x50/0x90 [ 413.225964][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.231068][T14368] get_compat_msghdr+0x108/0x270 [ 413.236066][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.240542][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.245189][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.251229][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.257355][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.262530][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.267353][T14368] do_SYSENTER_32+0x73/0x90 [ 413.271831][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.278123][T14368] [ 413.280426][T14368] Uninit was stored to memory at: [ 413.285423][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.291115][T14368] __msan_chain_origin+0x50/0x90 [ 413.296027][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.301131][T14368] get_compat_msghdr+0x108/0x270 [ 413.306044][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.310523][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.315172][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.321216][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.327343][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.332517][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.337341][T14368] do_SYSENTER_32+0x73/0x90 [ 413.341816][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.348109][T14368] [ 413.350410][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 413.357067][T14368] do_recvmmsg+0xc5/0x1ee0 [ 413.361470][T14368] do_recvmmsg+0xc5/0x1ee0 [ 413.534277][T14368] not chained 100000 origins [ 413.538907][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 413.547570][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.557619][T14368] Call Trace: [ 413.560915][T14368] dump_stack+0x1df/0x240 [ 413.565254][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 413.570978][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 413.576789][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 413.582856][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 413.587640][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 413.592751][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 413.598300][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 413.604373][T14368] ? _copy_from_user+0x15b/0x260 [ 413.609311][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 413.614422][T14368] __msan_chain_origin+0x50/0x90 [ 413.619372][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.624501][T14368] get_compat_msghdr+0x108/0x270 [ 413.629458][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.633976][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 413.639608][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 413.644695][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 413.650302][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 413.655564][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 413.660302][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 413.665041][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 413.670217][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.674877][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.680921][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 413.687141][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.693325][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.698504][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.703334][T14368] do_SYSENTER_32+0x73/0x90 [ 413.707815][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.714117][T14368] RIP: 0023:0xf7f77549 [ 413.718155][T14368] Code: Bad RIP value. [ 413.722195][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 413.730580][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 413.738528][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 413.746477][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 413.754424][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 413.762373][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.770327][T14368] Uninit was stored to memory at: [ 413.775327][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.781018][T14368] __msan_chain_origin+0x50/0x90 [ 413.785933][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.791018][T14368] get_compat_msghdr+0x108/0x270 [ 413.795933][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.800408][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.805056][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.811098][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.817226][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.822496][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.827336][T14368] do_SYSENTER_32+0x73/0x90 [ 413.831832][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.838125][T14368] [ 413.840426][T14368] Uninit was stored to memory at: [ 413.845426][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.851126][T14368] __msan_chain_origin+0x50/0x90 [ 413.856039][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.861156][T14368] get_compat_msghdr+0x108/0x270 [ 413.866069][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.870594][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.875243][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.881283][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.887411][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.892582][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.897492][T14368] do_SYSENTER_32+0x73/0x90 [ 413.901968][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.908267][T14368] [ 413.910567][T14368] Uninit was stored to memory at: [ 413.915569][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.921261][T14368] __msan_chain_origin+0x50/0x90 [ 413.926188][T14368] __get_compat_msghdr+0x5be/0x890 [ 413.931271][T14368] get_compat_msghdr+0x108/0x270 [ 413.936186][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 413.940661][T14368] __sys_recvmmsg+0x4ca/0x510 [ 413.945310][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 413.951350][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 413.957498][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 413.962669][T14368] do_fast_syscall_32+0x6b/0xd0 [ 413.967493][T14368] do_SYSENTER_32+0x73/0x90 [ 413.971968][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 413.978262][T14368] [ 413.980562][T14368] Uninit was stored to memory at: [ 413.985557][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 413.991249][T14368] __msan_chain_origin+0x50/0x90 [ 413.996159][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.001243][T14368] get_compat_msghdr+0x108/0x270 [ 414.006155][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.010630][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.015294][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.021332][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.027467][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.032640][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.037467][T14368] do_SYSENTER_32+0x73/0x90 [ 414.041942][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.048235][T14368] [ 414.050536][T14368] Uninit was stored to memory at: [ 414.055533][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.061234][T14368] __msan_chain_origin+0x50/0x90 [ 414.066147][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.071234][T14368] get_compat_msghdr+0x108/0x270 [ 414.076145][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.080636][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.085285][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.091325][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.097454][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.102627][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.107454][T14368] do_SYSENTER_32+0x73/0x90 [ 414.111932][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.118227][T14368] [ 414.120545][T14368] Uninit was stored to memory at: [ 414.125543][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.131236][T14368] __msan_chain_origin+0x50/0x90 [ 414.136149][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.141233][T14368] get_compat_msghdr+0x108/0x270 [ 414.146143][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.150619][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.155280][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.161320][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.167450][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.172624][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.177452][T14368] do_SYSENTER_32+0x73/0x90 [ 414.181928][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.188221][T14368] [ 414.190521][T14368] Uninit was stored to memory at: [ 414.195518][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.201213][T14368] __msan_chain_origin+0x50/0x90 [ 414.206127][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.211232][T14368] get_compat_msghdr+0x108/0x270 [ 414.216143][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.220620][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.225269][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.231310][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.237436][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.242611][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.247437][T14368] do_SYSENTER_32+0x73/0x90 [ 414.251916][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.258209][T14368] [ 414.260508][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 414.267154][T14368] do_recvmmsg+0xc5/0x1ee0 [ 414.271539][T14368] do_recvmmsg+0xc5/0x1ee0 [ 414.432209][T14368] not chained 110000 origins [ 414.436837][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 414.445502][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.455553][T14368] Call Trace: [ 414.458848][T14368] dump_stack+0x1df/0x240 [ 414.463186][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 414.468908][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 414.474715][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 414.480781][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 414.485566][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 414.490678][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 414.496228][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 414.502299][T14368] ? _copy_from_user+0x15b/0x260 [ 414.507240][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 414.512349][T14368] __msan_chain_origin+0x50/0x90 [ 414.517290][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.522416][T14368] get_compat_msghdr+0x108/0x270 [ 414.527369][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.531880][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 414.537529][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 414.542640][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 414.548274][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 414.553561][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 414.558329][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 414.563067][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 414.568238][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.572898][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.578942][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 414.585155][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.591294][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.596474][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.601300][T14368] do_SYSENTER_32+0x73/0x90 [ 414.605816][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.612127][T14368] RIP: 0023:0xf7f77549 [ 414.616164][T14368] Code: Bad RIP value. [ 414.620200][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 414.628583][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 414.636529][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 414.644476][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.652420][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 414.660366][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.668320][T14368] Uninit was stored to memory at: [ 414.673321][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.679117][T14368] __msan_chain_origin+0x50/0x90 [ 414.684026][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.689112][T14368] get_compat_msghdr+0x108/0x270 [ 414.694023][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.698501][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.703152][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.709193][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.715337][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.720512][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.725338][T14368] do_SYSENTER_32+0x73/0x90 [ 414.729815][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.736108][T14368] [ 414.738407][T14368] Uninit was stored to memory at: [ 414.743406][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.749099][T14368] __msan_chain_origin+0x50/0x90 [ 414.754009][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.759097][T14368] get_compat_msghdr+0x108/0x270 [ 414.764007][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.768483][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.773131][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.779168][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.785293][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.790466][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.795293][T14368] do_SYSENTER_32+0x73/0x90 [ 414.799770][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.806083][T14368] [ 414.808384][T14368] Uninit was stored to memory at: [ 414.813380][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.819072][T14368] __msan_chain_origin+0x50/0x90 [ 414.823988][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.829076][T14368] get_compat_msghdr+0x108/0x270 [ 414.833987][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.838463][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.843115][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.849156][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.855280][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.860455][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.865278][T14368] do_SYSENTER_32+0x73/0x90 [ 414.869755][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.876050][T14368] [ 414.878349][T14368] Uninit was stored to memory at: [ 414.883346][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.889037][T14368] __msan_chain_origin+0x50/0x90 [ 414.893949][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.899032][T14368] get_compat_msghdr+0x108/0x270 [ 414.903942][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.908419][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.913070][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.919111][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.925239][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 414.930410][T14368] do_fast_syscall_32+0x6b/0xd0 [ 414.935232][T14368] do_SYSENTER_32+0x73/0x90 [ 414.939707][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 414.945999][T14368] [ 414.948299][T14368] Uninit was stored to memory at: [ 414.953307][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 414.958999][T14368] __msan_chain_origin+0x50/0x90 [ 414.963911][T14368] __get_compat_msghdr+0x5be/0x890 [ 414.969008][T14368] get_compat_msghdr+0x108/0x270 [ 414.973973][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 414.978461][T14368] __sys_recvmmsg+0x4ca/0x510 [ 414.983118][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 414.989160][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 414.995290][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.000464][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.005290][T14368] do_SYSENTER_32+0x73/0x90 [ 415.009767][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.016062][T14368] [ 415.018517][T14368] Uninit was stored to memory at: [ 415.023518][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.029214][T14368] __msan_chain_origin+0x50/0x90 [ 415.034151][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.039236][T14368] get_compat_msghdr+0x108/0x270 [ 415.044177][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.048657][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.053308][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.059394][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.065523][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.070699][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.075525][T14368] do_SYSENTER_32+0x73/0x90 [ 415.080002][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.086295][T14368] [ 415.088592][T14368] Uninit was stored to memory at: [ 415.093593][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.099289][T14368] __msan_chain_origin+0x50/0x90 [ 415.104201][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.109287][T14368] get_compat_msghdr+0x108/0x270 [ 415.114197][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.118692][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.123347][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.129394][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.135520][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.140694][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.145519][T14368] do_SYSENTER_32+0x73/0x90 [ 415.149995][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.156297][T14368] [ 415.158606][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 415.165860][T14368] do_recvmmsg+0xc5/0x1ee0 [ 415.170257][T14368] do_recvmmsg+0xc5/0x1ee0 [ 415.306512][T14368] not chained 120000 origins [ 415.311142][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 415.319809][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.329859][T14368] Call Trace: [ 415.333154][T14368] dump_stack+0x1df/0x240 [ 415.337493][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 415.343215][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 415.349033][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 415.355222][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 415.360024][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 415.365149][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 415.370701][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 415.376805][T14368] ? _copy_from_user+0x15b/0x260 [ 415.381746][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 415.386859][T14368] __msan_chain_origin+0x50/0x90 [ 415.391805][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.396930][T14368] get_compat_msghdr+0x108/0x270 [ 415.401878][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.406396][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 415.412043][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 415.417152][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 415.422786][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 415.428091][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 415.432867][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 415.437642][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 415.442851][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.447543][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.453616][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 415.459861][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.466019][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.471225][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.476092][T14368] do_SYSENTER_32+0x73/0x90 [ 415.480599][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.486897][T14368] RIP: 0023:0xf7f77549 [ 415.490950][T14368] Code: Bad RIP value. [ 415.494987][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 415.503370][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 415.511319][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 415.519267][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.527215][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 415.535160][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.543112][T14368] Uninit was stored to memory at: [ 415.548118][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.553810][T14368] __msan_chain_origin+0x50/0x90 [ 415.558809][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.563979][T14368] get_compat_msghdr+0x108/0x270 [ 415.568893][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.573369][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.578022][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.584061][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.590188][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.595359][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.600324][T14368] do_SYSENTER_32+0x73/0x90 [ 415.604799][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.611092][T14368] [ 415.613392][T14368] Uninit was stored to memory at: [ 415.618391][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.624080][T14368] __msan_chain_origin+0x50/0x90 [ 415.629045][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.634132][T14368] get_compat_msghdr+0x108/0x270 [ 415.639041][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.643515][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.648168][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.654213][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.660341][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.665511][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.670334][T14368] do_SYSENTER_32+0x73/0x90 [ 415.674810][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.681105][T14368] [ 415.683406][T14368] Uninit was stored to memory at: [ 415.688413][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.694104][T14368] __msan_chain_origin+0x50/0x90 [ 415.699015][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.704099][T14368] get_compat_msghdr+0x108/0x270 [ 415.709011][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.713487][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.718137][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.724177][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.730304][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.735475][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.740299][T14368] do_SYSENTER_32+0x73/0x90 [ 415.744775][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.751068][T14368] [ 415.753369][T14368] Uninit was stored to memory at: [ 415.758373][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.764063][T14368] __msan_chain_origin+0x50/0x90 [ 415.768977][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.774237][T14368] get_compat_msghdr+0x108/0x270 [ 415.779148][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.783626][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.788283][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.794320][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.800452][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.805624][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.810448][T14368] do_SYSENTER_32+0x73/0x90 [ 415.814923][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.821219][T14368] [ 415.823523][T14368] Uninit was stored to memory at: [ 415.828526][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.834221][T14368] __msan_chain_origin+0x50/0x90 [ 415.839135][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.844224][T14368] get_compat_msghdr+0x108/0x270 [ 415.849137][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.853614][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.858279][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.864317][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.870444][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.875616][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.880457][T14368] do_SYSENTER_32+0x73/0x90 [ 415.884954][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.891249][T14368] [ 415.893551][T14368] Uninit was stored to memory at: [ 415.898564][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.904255][T14368] __msan_chain_origin+0x50/0x90 [ 415.909163][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.914256][T14368] get_compat_msghdr+0x108/0x270 [ 415.919165][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.923639][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.928289][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 415.934328][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 415.940455][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 415.945627][T14368] do_fast_syscall_32+0x6b/0xd0 [ 415.950451][T14368] do_SYSENTER_32+0x73/0x90 [ 415.954927][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 415.961221][T14368] [ 415.963522][T14368] Uninit was stored to memory at: [ 415.968521][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 415.974215][T14368] __msan_chain_origin+0x50/0x90 [ 415.979135][T14368] __get_compat_msghdr+0x5be/0x890 [ 415.984237][T14368] get_compat_msghdr+0x108/0x270 [ 415.989146][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 415.993620][T14368] __sys_recvmmsg+0x4ca/0x510 [ 415.998275][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.004315][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.010702][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.015875][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.020717][T14368] do_SYSENTER_32+0x73/0x90 [ 416.025192][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.031484][T14368] [ 416.033787][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 416.040434][T14368] do_recvmmsg+0xc5/0x1ee0 [ 416.044828][T14368] do_recvmmsg+0xc5/0x1ee0 [ 416.179872][T14368] not chained 130000 origins [ 416.184580][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 416.193263][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.203315][T14368] Call Trace: [ 416.206609][T14368] dump_stack+0x1df/0x240 [ 416.210944][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 416.216661][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 416.222469][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 416.228539][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 416.233326][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 416.238441][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 416.243989][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 416.250062][T14368] ? _copy_from_user+0x15b/0x260 [ 416.255000][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 416.260111][T14368] __msan_chain_origin+0x50/0x90 [ 416.265056][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.271054][T14368] get_compat_msghdr+0x108/0x270 [ 416.276000][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.280513][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 416.286159][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 416.291271][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 416.296907][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 416.302196][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 416.306958][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 416.311723][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 416.316934][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.321621][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.327683][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 416.333898][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.340089][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.345281][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.350124][T14368] do_SYSENTER_32+0x73/0x90 [ 416.354616][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.360915][T14368] RIP: 0023:0xf7f77549 [ 416.364956][T14368] Code: Bad RIP value. [ 416.368995][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 416.377381][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 416.385327][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 416.393272][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.401218][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 416.409164][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.417116][T14368] Uninit was stored to memory at: [ 416.422137][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 416.427828][T14368] __msan_chain_origin+0x50/0x90 [ 416.432738][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.437823][T14368] get_compat_msghdr+0x108/0x270 [ 416.442732][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.447212][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.451862][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.457900][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.464027][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.469200][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.474023][T14368] do_SYSENTER_32+0x73/0x90 [ 416.478500][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.484793][T14368] [ 416.487091][T14368] Uninit was stored to memory at: [ 416.492086][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 416.497780][T14368] __msan_chain_origin+0x50/0x90 [ 416.502692][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.507776][T14368] get_compat_msghdr+0x108/0x270 [ 416.512687][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.517163][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.521813][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.527852][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.533976][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.539150][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.543975][T14368] do_SYSENTER_32+0x73/0x90 [ 416.548451][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.554744][T14368] [ 416.557055][T14368] Uninit was stored to memory at: [ 416.562057][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 416.567747][T14368] __msan_chain_origin+0x50/0x90 [ 416.572661][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.577751][T14368] get_compat_msghdr+0x108/0x270 [ 416.582662][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.587141][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.591792][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.597829][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.603955][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.609129][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.613953][T14368] do_SYSENTER_32+0x73/0x90 [ 416.618432][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.624724][T14368] [ 416.627043][T14368] Uninit was stored to memory at: [ 416.632044][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 416.637734][T14368] __msan_chain_origin+0x50/0x90 [ 416.642646][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.647745][T14368] get_compat_msghdr+0x108/0x270 [ 416.652657][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.657133][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.661812][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.667851][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.673977][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.679151][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.683974][T14368] do_SYSENTER_32+0x73/0x90 [ 416.688452][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.694744][T14368] [ 416.697046][T14368] Uninit was stored to memory at: [ 416.702043][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 416.707735][T14368] __msan_chain_origin+0x50/0x90 [ 416.712648][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.717734][T14368] get_compat_msghdr+0x108/0x270 [ 416.722645][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.727120][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.731769][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.737809][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.743936][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.749108][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.753931][T14368] do_SYSENTER_32+0x73/0x90 [ 416.758408][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.764701][T14368] [ 416.767004][T14368] Uninit was stored to memory at: [ 416.772001][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 416.777694][T14368] __msan_chain_origin+0x50/0x90 [ 416.782605][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.787862][T14368] get_compat_msghdr+0x108/0x270 [ 416.792772][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.797248][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.801986][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.808024][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.814152][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.819332][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.824170][T14368] do_SYSENTER_32+0x73/0x90 [ 416.828648][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.834941][T14368] [ 416.837240][T14368] Uninit was stored to memory at: [ 416.842239][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 416.847932][T14368] __msan_chain_origin+0x50/0x90 [ 416.852845][T14368] __get_compat_msghdr+0x5be/0x890 [ 416.857929][T14368] get_compat_msghdr+0x108/0x270 [ 416.862842][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 416.867321][T14368] __sys_recvmmsg+0x4ca/0x510 [ 416.871970][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 416.878021][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 416.884145][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 416.889317][T14368] do_fast_syscall_32+0x6b/0xd0 [ 416.894139][T14368] do_SYSENTER_32+0x73/0x90 [ 416.898629][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 416.904921][T14368] [ 416.907242][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 416.913889][T14368] do_recvmmsg+0xc5/0x1ee0 [ 416.918280][T14368] do_recvmmsg+0xc5/0x1ee0 [ 417.053284][T14368] not chained 140000 origins [ 417.058007][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 417.066673][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.076734][T14368] Call Trace: [ 417.080040][T14368] dump_stack+0x1df/0x240 [ 417.084385][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 417.090108][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 417.095913][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 417.101986][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 417.106767][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 417.111880][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 417.117426][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 417.123494][T14368] ? _copy_from_user+0x15b/0x260 [ 417.128429][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 417.133539][T14368] __msan_chain_origin+0x50/0x90 [ 417.138486][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.143615][T14368] get_compat_msghdr+0x108/0x270 [ 417.148570][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.153086][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 417.158732][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 417.163849][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 417.169485][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 417.174784][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 417.179550][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 417.186661][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 417.191864][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.196555][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.202628][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 417.208872][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.215017][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.220197][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.225026][T14368] do_SYSENTER_32+0x73/0x90 [ 417.229508][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.235810][T14368] RIP: 0023:0xf7f77549 [ 417.239955][T14368] Code: Bad RIP value. [ 417.243994][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 417.252385][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 417.260332][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 417.268277][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.276224][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 417.284169][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.292149][T14368] Uninit was stored to memory at: [ 417.297152][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 417.302843][T14368] __msan_chain_origin+0x50/0x90 [ 417.307756][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.312841][T14368] get_compat_msghdr+0x108/0x270 [ 417.317757][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.322245][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.326895][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.332934][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.339059][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.344232][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.349056][T14368] do_SYSENTER_32+0x73/0x90 [ 417.353532][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.359824][T14368] [ 417.362123][T14368] Uninit was stored to memory at: [ 417.367122][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 417.372813][T14368] __msan_chain_origin+0x50/0x90 [ 417.377739][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.382832][T14368] get_compat_msghdr+0x108/0x270 [ 417.387749][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.392242][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.396908][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.402953][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.409084][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.414258][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.419084][T14368] do_SYSENTER_32+0x73/0x90 [ 417.423563][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.429859][T14368] [ 417.432160][T14368] Uninit was stored to memory at: [ 417.437161][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 417.442852][T14368] __msan_chain_origin+0x50/0x90 [ 417.447764][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.452849][T14368] get_compat_msghdr+0x108/0x270 [ 417.457762][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.462243][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.466905][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.472959][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.479095][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.484271][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.489096][T14368] do_SYSENTER_32+0x73/0x90 [ 417.493572][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.499865][T14368] [ 417.502167][T14368] Uninit was stored to memory at: [ 417.507165][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 417.512878][T14368] __msan_chain_origin+0x50/0x90 [ 417.517789][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.522874][T14368] get_compat_msghdr+0x108/0x270 [ 417.527874][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.532612][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.537264][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.543302][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.549428][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.554601][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.559431][T14368] do_SYSENTER_32+0x73/0x90 [ 417.563909][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.570204][T14368] [ 417.572508][T14368] Uninit was stored to memory at: [ 417.577525][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 417.583237][T14368] __msan_chain_origin+0x50/0x90 [ 417.588153][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.593239][T14368] get_compat_msghdr+0x108/0x270 [ 417.598158][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.602648][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.607329][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.613371][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.619500][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.624672][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.629494][T14368] do_SYSENTER_32+0x73/0x90 [ 417.633971][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.640264][T14368] [ 417.642564][T14368] Uninit was stored to memory at: [ 417.647565][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 417.653255][T14368] __msan_chain_origin+0x50/0x90 [ 417.658168][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.663253][T14368] get_compat_msghdr+0x108/0x270 [ 417.668164][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.672641][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.677292][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.683332][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.689464][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.694636][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.699464][T14368] do_SYSENTER_32+0x73/0x90 [ 417.703941][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.710235][T14368] [ 417.712536][T14368] Uninit was stored to memory at: [ 417.717535][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 417.723225][T14368] __msan_chain_origin+0x50/0x90 [ 417.728137][T14368] __get_compat_msghdr+0x5be/0x890 [ 417.733223][T14368] get_compat_msghdr+0x108/0x270 [ 417.738133][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 417.742609][T14368] __sys_recvmmsg+0x4ca/0x510 [ 417.747261][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 417.753299][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 417.759427][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 417.764604][T14368] do_fast_syscall_32+0x6b/0xd0 [ 417.769429][T14368] do_SYSENTER_32+0x73/0x90 [ 417.773909][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 417.780203][T14368] [ 417.782505][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 417.789152][T14368] do_recvmmsg+0xc5/0x1ee0 [ 417.793540][T14368] do_recvmmsg+0xc5/0x1ee0 [ 417.938881][T14368] not chained 150000 origins [ 417.943506][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 417.952174][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.962229][T14368] Call Trace: [ 417.965524][T14368] dump_stack+0x1df/0x240 [ 417.969862][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 417.975586][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 417.981494][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 417.987563][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 417.992345][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 417.997568][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 418.003117][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 418.009190][T14368] ? _copy_from_user+0x15b/0x260 [ 418.014128][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 418.019240][T14368] __msan_chain_origin+0x50/0x90 [ 418.024186][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.029317][T14368] get_compat_msghdr+0x108/0x270 [ 418.034266][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.038784][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 418.044430][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 418.049546][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 418.055180][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 418.060482][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 418.065249][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 418.070012][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 418.075212][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.079900][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.085970][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 418.092211][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.098358][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.103625][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.108456][T14368] do_SYSENTER_32+0x73/0x90 [ 418.112938][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.119240][T14368] RIP: 0023:0xf7f77549 [ 418.123277][T14368] Code: Bad RIP value. [ 418.127317][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 418.135703][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 418.143648][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 418.151595][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.159541][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 418.167488][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.175443][T14368] Uninit was stored to memory at: [ 418.180453][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 418.186166][T14368] __msan_chain_origin+0x50/0x90 [ 418.191080][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.196195][T14368] get_compat_msghdr+0x108/0x270 [ 418.201105][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.205598][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.210261][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.216312][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.222445][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.227620][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.232446][T14368] do_SYSENTER_32+0x73/0x90 [ 418.236950][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.243244][T14368] [ 418.245545][T14368] Uninit was stored to memory at: [ 418.250545][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 418.256238][T14368] __msan_chain_origin+0x50/0x90 [ 418.261149][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.266234][T14368] get_compat_msghdr+0x108/0x270 [ 418.271189][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.275667][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.280318][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.286356][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.292484][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.297657][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.302480][T14368] do_SYSENTER_32+0x73/0x90 [ 418.306960][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.313255][T14368] [ 418.315555][T14368] Uninit was stored to memory at: [ 418.320552][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 418.326243][T14368] __msan_chain_origin+0x50/0x90 [ 418.331155][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.336240][T14368] get_compat_msghdr+0x108/0x270 [ 418.341161][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.345655][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.350314][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.356358][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.362491][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.367665][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.372492][T14368] do_SYSENTER_32+0x73/0x90 [ 418.376969][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.383265][T14368] [ 418.385620][T14368] Uninit was stored to memory at: [ 418.390620][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 418.396311][T14368] __msan_chain_origin+0x50/0x90 [ 418.401224][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.406309][T14368] get_compat_msghdr+0x108/0x270 [ 418.411221][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.415698][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.420347][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.426386][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.432514][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.437700][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.442527][T14368] do_SYSENTER_32+0x73/0x90 [ 418.447007][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.453303][T14368] [ 418.455605][T14368] Uninit was stored to memory at: [ 418.460968][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 418.466661][T14368] __msan_chain_origin+0x50/0x90 [ 418.471578][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.476666][T14368] get_compat_msghdr+0x108/0x270 [ 418.481591][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.486075][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.490730][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.496777][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.502907][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.508081][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.512908][T14368] do_SYSENTER_32+0x73/0x90 [ 418.517387][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.523681][T14368] [ 418.525980][T14368] Uninit was stored to memory at: [ 418.530991][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 418.536681][T14368] __msan_chain_origin+0x50/0x90 [ 418.541614][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.546698][T14368] get_compat_msghdr+0x108/0x270 [ 418.551616][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.556139][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.560790][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.566829][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.572954][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.578125][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.582948][T14368] do_SYSENTER_32+0x73/0x90 [ 418.587425][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.593720][T14368] [ 418.596023][T14368] Uninit was stored to memory at: [ 418.601022][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 418.606716][T14368] __msan_chain_origin+0x50/0x90 [ 418.611632][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.616719][T14368] get_compat_msghdr+0x108/0x270 [ 418.621629][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.626104][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.630751][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.636839][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.642966][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.648139][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.652963][T14368] do_SYSENTER_32+0x73/0x90 [ 418.657440][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.663737][T14368] [ 418.666040][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 418.672687][T14368] do_recvmmsg+0xc5/0x1ee0 [ 418.677074][T14368] do_recvmmsg+0xc5/0x1ee0 [ 418.812381][T14368] not chained 160000 origins [ 418.817014][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 418.825683][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.835739][T14368] Call Trace: [ 418.839036][T14368] dump_stack+0x1df/0x240 [ 418.843370][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 418.849087][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 418.854894][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 418.860960][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 418.865747][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 418.870859][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 418.876405][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 418.882478][T14368] ? _copy_from_user+0x15b/0x260 [ 418.887416][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 418.892530][T14368] __msan_chain_origin+0x50/0x90 [ 418.897481][T14368] __get_compat_msghdr+0x5be/0x890 [ 418.902610][T14368] get_compat_msghdr+0x108/0x270 [ 418.907560][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 418.912089][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 418.917737][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 418.922861][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 418.928498][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 418.933789][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 418.938556][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 418.943338][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 418.948539][T14368] __sys_recvmmsg+0x4ca/0x510 [ 418.953222][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 418.959324][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 418.965574][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 418.971729][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 418.976925][T14368] do_fast_syscall_32+0x6b/0xd0 [ 418.981756][T14368] do_SYSENTER_32+0x73/0x90 [ 418.986237][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 418.992540][T14368] RIP: 0023:0xf7f77549 [ 418.996579][T14368] Code: Bad RIP value. [ 419.000630][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 419.009026][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 419.017028][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 419.024976][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.032920][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 419.040868][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.048823][T14368] Uninit was stored to memory at: [ 419.053826][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.060102][T14368] __msan_chain_origin+0x50/0x90 [ 419.065015][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.070102][T14368] get_compat_msghdr+0x108/0x270 [ 419.075014][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.079490][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.084161][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.090212][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.096347][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.101522][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.106371][T14368] do_SYSENTER_32+0x73/0x90 [ 419.110847][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.117142][T14368] [ 419.119447][T14368] Uninit was stored to memory at: [ 419.124446][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.130138][T14368] __msan_chain_origin+0x50/0x90 [ 419.135050][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.140136][T14368] get_compat_msghdr+0x108/0x270 [ 419.145048][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.149528][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.154180][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.160218][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.166345][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.171531][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.176354][T14368] do_SYSENTER_32+0x73/0x90 [ 419.180830][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.187125][T14368] [ 419.189428][T14368] Uninit was stored to memory at: [ 419.194429][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.200122][T14368] __msan_chain_origin+0x50/0x90 [ 419.205032][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.210138][T14368] get_compat_msghdr+0x108/0x270 [ 419.215056][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.219534][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.224190][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.230492][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.236624][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.241885][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.246712][T14368] do_SYSENTER_32+0x73/0x90 [ 419.251190][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.257485][T14368] [ 419.259787][T14368] Uninit was stored to memory at: [ 419.264786][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.270482][T14368] __msan_chain_origin+0x50/0x90 [ 419.275402][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.280507][T14368] get_compat_msghdr+0x108/0x270 [ 419.285428][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.289924][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.294632][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.300673][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.306800][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.311971][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.316796][T14368] do_SYSENTER_32+0x73/0x90 [ 419.321273][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.327568][T14368] [ 419.329867][T14368] Uninit was stored to memory at: [ 419.334867][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.340561][T14368] __msan_chain_origin+0x50/0x90 [ 419.345476][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.350559][T14368] get_compat_msghdr+0x108/0x270 [ 419.355474][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.359949][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.364598][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.370649][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.376784][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.381962][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.386791][T14368] do_SYSENTER_32+0x73/0x90 [ 419.391270][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.397566][T14368] [ 419.399867][T14368] Uninit was stored to memory at: [ 419.404866][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.410560][T14368] __msan_chain_origin+0x50/0x90 [ 419.415477][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.420559][T14368] get_compat_msghdr+0x108/0x270 [ 419.425478][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.429961][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.434610][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.440651][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.446777][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.451946][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.456773][T14368] do_SYSENTER_32+0x73/0x90 [ 419.461247][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.467541][T14368] [ 419.469843][T14368] Uninit was stored to memory at: [ 419.474840][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.480530][T14368] __msan_chain_origin+0x50/0x90 [ 419.485448][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.490536][T14368] get_compat_msghdr+0x108/0x270 [ 419.495449][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.499927][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.504575][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.510615][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.516754][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.521923][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.526745][T14368] do_SYSENTER_32+0x73/0x90 [ 419.531220][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.537515][T14368] [ 419.539818][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 419.546470][T14368] do_recvmmsg+0xc5/0x1ee0 [ 419.550858][T14368] do_recvmmsg+0xc5/0x1ee0 [ 419.685871][T14368] not chained 170000 origins [ 419.690500][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 419.699165][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.709235][T14368] Call Trace: [ 419.712528][T14368] dump_stack+0x1df/0x240 [ 419.716864][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 419.722582][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 419.728392][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 419.734460][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 419.739250][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 419.744363][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 419.749910][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 419.755980][T14368] ? _copy_from_user+0x15b/0x260 [ 419.760921][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 419.766031][T14368] __msan_chain_origin+0x50/0x90 [ 419.770976][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.776105][T14368] get_compat_msghdr+0x108/0x270 [ 419.781057][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.785572][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 419.791220][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 419.796332][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 419.801966][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 419.807255][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 419.812015][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 419.816779][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 419.821982][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.826676][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.832743][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 419.838987][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.845149][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.850362][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.855224][T14368] do_SYSENTER_32+0x73/0x90 [ 419.859735][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.866060][T14368] RIP: 0023:0xf7f77549 [ 419.870121][T14368] Code: Bad RIP value. [ 419.874181][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 419.882597][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 419.890573][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 419.898644][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.906617][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 419.914587][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.922570][T14368] Uninit was stored to memory at: [ 419.927608][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 419.933334][T14368] __msan_chain_origin+0x50/0x90 [ 419.938279][T14368] __get_compat_msghdr+0x5be/0x890 [ 419.943395][T14368] get_compat_msghdr+0x108/0x270 [ 419.948333][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 419.952826][T14368] __sys_recvmmsg+0x4ca/0x510 [ 419.957491][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 419.963542][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 419.969680][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 419.974865][T14368] do_fast_syscall_32+0x6b/0xd0 [ 419.979699][T14368] do_SYSENTER_32+0x73/0x90 [ 419.984186][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 419.990489][T14368] [ 419.992798][T14368] Uninit was stored to memory at: [ 419.997809][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.003510][T14368] __msan_chain_origin+0x50/0x90 [ 420.008433][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.013536][T14368] get_compat_msghdr+0x108/0x270 [ 420.018456][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.022947][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.027610][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.033660][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.039804][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.044984][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.049820][T14368] do_SYSENTER_32+0x73/0x90 [ 420.054307][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.060608][T14368] [ 420.062914][T14368] Uninit was stored to memory at: [ 420.067923][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.073624][T14368] __msan_chain_origin+0x50/0x90 [ 420.078547][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.083649][T14368] get_compat_msghdr+0x108/0x270 [ 420.088568][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.093055][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.097714][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.103850][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.109982][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.115174][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.120005][T14368] do_SYSENTER_32+0x73/0x90 [ 420.124497][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.130799][T14368] [ 420.133106][T14368] Uninit was stored to memory at: [ 420.138115][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.143816][T14368] __msan_chain_origin+0x50/0x90 [ 420.148738][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.153834][T14368] get_compat_msghdr+0x108/0x270 [ 420.158754][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.163245][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.167906][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.173957][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.180092][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.185275][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.190109][T14368] do_SYSENTER_32+0x73/0x90 [ 420.194598][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.200905][T14368] [ 420.203239][T14368] Uninit was stored to memory at: [ 420.208268][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.213983][T14368] __msan_chain_origin+0x50/0x90 [ 420.218920][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.224025][T14368] get_compat_msghdr+0x108/0x270 [ 420.228945][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.233526][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.238186][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.244236][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.250373][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.255555][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.260391][T14368] do_SYSENTER_32+0x73/0x90 [ 420.264877][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.271181][T14368] [ 420.273493][T14368] Uninit was stored to memory at: [ 420.278504][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.284207][T14368] __msan_chain_origin+0x50/0x90 [ 420.289129][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.294225][T14368] get_compat_msghdr+0x108/0x270 [ 420.299147][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.303637][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.308295][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.314341][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.320476][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.325656][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.330488][T14368] do_SYSENTER_32+0x73/0x90 [ 420.334980][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.341282][T14368] [ 420.343590][T14368] Uninit was stored to memory at: [ 420.348616][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.354405][T14368] __msan_chain_origin+0x50/0x90 [ 420.359329][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.364422][T14368] get_compat_msghdr+0x108/0x270 [ 420.369344][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.373831][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.378488][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.384538][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.390674][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.395858][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.400712][T14368] do_SYSENTER_32+0x73/0x90 [ 420.405198][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.411499][T14368] [ 420.413808][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 420.420468][T14368] do_recvmmsg+0xc5/0x1ee0 [ 420.424870][T14368] do_recvmmsg+0xc5/0x1ee0 [ 420.561226][T14368] not chained 180000 origins [ 420.565851][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 420.574515][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.584575][T14368] Call Trace: [ 420.587871][T14368] dump_stack+0x1df/0x240 [ 420.592209][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 420.597930][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 420.603741][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 420.609815][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 420.614595][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 420.619702][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 420.625248][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 420.631312][T14368] ? _copy_from_user+0x15b/0x260 [ 420.636268][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 420.641375][T14368] __msan_chain_origin+0x50/0x90 [ 420.646318][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.651443][T14368] get_compat_msghdr+0x108/0x270 [ 420.656394][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.660907][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 420.666553][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 420.671667][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 420.677307][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 420.682595][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 420.687362][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 420.692125][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 420.697325][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.702032][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.708104][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 420.714344][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.720493][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.725684][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.730522][T14368] do_SYSENTER_32+0x73/0x90 [ 420.735015][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.741338][T14368] RIP: 0023:0xf7f77549 [ 420.745394][T14368] Code: Bad RIP value. [ 420.749449][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 420.757850][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 420.765808][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 420.773765][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.781723][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 420.789678][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.797643][T14368] Uninit was stored to memory at: [ 420.802656][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.808360][T14368] __msan_chain_origin+0x50/0x90 [ 420.813284][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.818378][T14368] get_compat_msghdr+0x108/0x270 [ 420.823298][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.827783][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.832442][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.838489][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.844625][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.849811][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.854648][T14368] do_SYSENTER_32+0x73/0x90 [ 420.859135][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.865438][T14368] [ 420.867748][T14368] Uninit was stored to memory at: [ 420.872755][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.878458][T14368] __msan_chain_origin+0x50/0x90 [ 420.883382][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.888481][T14368] get_compat_msghdr+0x108/0x270 [ 420.893404][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.897893][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.902555][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.908603][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.914739][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.919923][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.924763][T14368] do_SYSENTER_32+0x73/0x90 [ 420.929250][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 420.935550][T14368] [ 420.937858][T14368] Uninit was stored to memory at: [ 420.942870][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 420.948571][T14368] __msan_chain_origin+0x50/0x90 [ 420.953493][T14368] __get_compat_msghdr+0x5be/0x890 [ 420.958589][T14368] get_compat_msghdr+0x108/0x270 [ 420.963512][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 420.967999][T14368] __sys_recvmmsg+0x4ca/0x510 [ 420.972656][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 420.978705][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 420.984841][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 420.990086][T14368] do_fast_syscall_32+0x6b/0xd0 [ 420.994928][T14368] do_SYSENTER_32+0x73/0x90 [ 420.999430][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.005739][T14368] [ 421.008053][T14368] Uninit was stored to memory at: [ 421.013069][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.018774][T14368] __msan_chain_origin+0x50/0x90 [ 421.023698][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.028796][T14368] get_compat_msghdr+0x108/0x270 [ 421.033720][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.038208][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.042961][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.049012][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.055154][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.060345][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.065195][T14368] do_SYSENTER_32+0x73/0x90 [ 421.069683][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.075987][T14368] [ 421.078299][T14368] Uninit was stored to memory at: [ 421.083311][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.089129][T14368] __msan_chain_origin+0x50/0x90 [ 421.094058][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.099156][T14368] get_compat_msghdr+0x108/0x270 [ 421.104079][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.108571][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.113236][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.119301][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.125441][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.130626][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.135463][T14368] do_SYSENTER_32+0x73/0x90 [ 421.139964][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.146266][T14368] [ 421.148575][T14368] Uninit was stored to memory at: [ 421.153606][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.159308][T14368] __msan_chain_origin+0x50/0x90 [ 421.164235][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.169347][T14368] get_compat_msghdr+0x108/0x270 [ 421.174273][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.178760][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.183423][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.189472][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.195610][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.200794][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.205638][T14368] do_SYSENTER_32+0x73/0x90 [ 421.210133][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.216446][T14368] [ 421.218762][T14368] Uninit was stored to memory at: [ 421.223780][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.229486][T14368] __msan_chain_origin+0x50/0x90 [ 421.234414][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.239527][T14368] get_compat_msghdr+0x108/0x270 [ 421.244452][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.248941][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.253602][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.260233][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.266374][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.271570][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.276407][T14368] do_SYSENTER_32+0x73/0x90 [ 421.280898][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.287209][T14368] [ 421.289525][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 421.296190][T14368] do_recvmmsg+0xc5/0x1ee0 [ 421.300592][T14368] do_recvmmsg+0xc5/0x1ee0 [ 421.436906][T14368] not chained 190000 origins [ 421.441547][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 421.450217][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.460677][T14368] Call Trace: [ 421.463975][T14368] dump_stack+0x1df/0x240 [ 421.468316][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 421.474043][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 421.479850][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 421.485919][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 421.490711][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 421.495827][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 421.501376][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 421.507454][T14368] ? _copy_from_user+0x15b/0x260 [ 421.512392][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 421.517509][T14368] __msan_chain_origin+0x50/0x90 [ 421.522457][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.527586][T14368] get_compat_msghdr+0x108/0x270 [ 421.532535][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.537049][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 421.542697][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 421.547809][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 421.553446][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 421.558853][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 421.563616][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 421.568380][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 421.573580][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.578269][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.584342][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 421.590585][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.596758][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.601972][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.606834][T14368] do_SYSENTER_32+0x73/0x90 [ 421.611349][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.617676][T14368] RIP: 0023:0xf7f77549 [ 421.621730][T14368] Code: Bad RIP value. [ 421.625780][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 421.634177][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 421.642132][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 421.650089][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.658044][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 421.666004][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.673969][T14368] Uninit was stored to memory at: [ 421.678996][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.684701][T14368] __msan_chain_origin+0x50/0x90 [ 421.689627][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.694720][T14368] get_compat_msghdr+0x108/0x270 [ 421.699644][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.704129][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.708797][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.714847][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.720983][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.726166][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.733534][T14368] do_SYSENTER_32+0x73/0x90 [ 421.738022][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.744327][T14368] [ 421.746633][T14368] Uninit was stored to memory at: [ 421.751642][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.757345][T14368] __msan_chain_origin+0x50/0x90 [ 421.762296][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.767394][T14368] get_compat_msghdr+0x108/0x270 [ 421.772318][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.776804][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.781467][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.787518][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.793659][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.798841][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.803673][T14368] do_SYSENTER_32+0x73/0x90 [ 421.808162][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.814465][T14368] [ 421.816775][T14368] Uninit was stored to memory at: [ 421.821783][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.827489][T14368] __msan_chain_origin+0x50/0x90 [ 421.832412][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.837507][T14368] get_compat_msghdr+0x108/0x270 [ 421.842431][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.846922][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.851583][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.857633][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.863769][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.868951][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.873793][T14368] do_SYSENTER_32+0x73/0x90 [ 421.878277][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.884581][T14368] [ 421.886890][T14368] Uninit was stored to memory at: [ 421.891898][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.897600][T14368] __msan_chain_origin+0x50/0x90 [ 421.902531][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.907628][T14368] get_compat_msghdr+0x108/0x270 [ 421.912552][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.917039][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.921697][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.927849][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 421.933989][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 421.939172][T14368] do_fast_syscall_32+0x6b/0xd0 [ 421.944009][T14368] do_SYSENTER_32+0x73/0x90 [ 421.948506][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 421.954814][T14368] [ 421.957120][T14368] Uninit was stored to memory at: [ 421.962128][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 421.967832][T14368] __msan_chain_origin+0x50/0x90 [ 421.972755][T14368] __get_compat_msghdr+0x5be/0x890 [ 421.977848][T14368] get_compat_msghdr+0x108/0x270 [ 421.982768][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 421.987274][T14368] __sys_recvmmsg+0x4ca/0x510 [ 421.991932][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 421.997980][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.004118][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.009303][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.014140][T14368] do_SYSENTER_32+0x73/0x90 [ 422.018750][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.025049][T14368] [ 422.027360][T14368] Uninit was stored to memory at: [ 422.032370][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.038070][T14368] __msan_chain_origin+0x50/0x90 [ 422.042991][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.048088][T14368] get_compat_msghdr+0x108/0x270 [ 422.053009][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.057495][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.062154][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.068203][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.074338][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.079521][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.084357][T14368] do_SYSENTER_32+0x73/0x90 [ 422.088843][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.095143][T14368] [ 422.097459][T14368] Uninit was stored to memory at: [ 422.102471][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.108171][T14368] __msan_chain_origin+0x50/0x90 [ 422.113091][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.118188][T14368] get_compat_msghdr+0x108/0x270 [ 422.123110][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.127595][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.132255][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.138310][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.144444][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.149629][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.154467][T14368] do_SYSENTER_32+0x73/0x90 [ 422.158965][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.165268][T14368] [ 422.167576][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 422.174233][T14368] do_recvmmsg+0xc5/0x1ee0 [ 422.178631][T14368] do_recvmmsg+0xc5/0x1ee0 [ 422.362136][T14368] not chained 200000 origins [ 422.366766][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 422.375434][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.385500][T14368] Call Trace: [ 422.388794][T14368] dump_stack+0x1df/0x240 [ 422.393145][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 422.398866][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 422.404675][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 422.410745][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 422.415554][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 422.420667][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 422.426217][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 422.432276][T14368] ? _copy_from_user+0x15b/0x260 [ 422.437203][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 422.442316][T14368] __msan_chain_origin+0x50/0x90 [ 422.447285][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.452399][T14368] get_compat_msghdr+0x108/0x270 [ 422.457337][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.461841][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 422.467481][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 422.472581][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 422.478200][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 422.483472][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 422.488226][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 422.492975][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 422.498160][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.502863][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.508918][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 422.515148][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.521293][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.526488][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.531327][T14368] do_SYSENTER_32+0x73/0x90 [ 422.535824][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.542134][T14368] RIP: 0023:0xf7f77549 [ 422.546180][T14368] Code: Bad RIP value. [ 422.550227][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 422.558620][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 422.566577][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 422.574531][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.582484][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 422.590444][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.598408][T14368] Uninit was stored to memory at: [ 422.603420][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.609126][T14368] __msan_chain_origin+0x50/0x90 [ 422.614052][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.619158][T14368] get_compat_msghdr+0x108/0x270 [ 422.624165][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.628654][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.633314][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.639364][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.645501][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.650698][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.655532][T14368] do_SYSENTER_32+0x73/0x90 [ 422.660027][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.666325][T14368] [ 422.668642][T14368] Uninit was stored to memory at: [ 422.673651][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.679353][T14368] __msan_chain_origin+0x50/0x90 [ 422.684273][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.689372][T14368] get_compat_msghdr+0x108/0x270 [ 422.694293][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.698779][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.703459][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.709509][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.715648][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.720828][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.725659][T14368] do_SYSENTER_32+0x73/0x90 [ 422.730145][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.736456][T14368] [ 422.738764][T14368] Uninit was stored to memory at: [ 422.743776][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.749477][T14368] __msan_chain_origin+0x50/0x90 [ 422.754399][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.759493][T14368] get_compat_msghdr+0x108/0x270 [ 422.764532][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.769020][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.773683][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.779731][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.785868][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.791049][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.795885][T14368] do_SYSENTER_32+0x73/0x90 [ 422.800381][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.806687][T14368] [ 422.808997][T14368] Uninit was stored to memory at: [ 422.814005][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.819707][T14368] __msan_chain_origin+0x50/0x90 [ 422.824627][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.829722][T14368] get_compat_msghdr+0x108/0x270 [ 422.834641][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.839129][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.843789][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.849836][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.855972][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.861152][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.865986][T14368] do_SYSENTER_32+0x73/0x90 [ 422.870471][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.876773][T14368] [ 422.879081][T14368] Uninit was stored to memory at: [ 422.884093][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.889795][T14368] __msan_chain_origin+0x50/0x90 [ 422.894717][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.899813][T14368] get_compat_msghdr+0x108/0x270 [ 422.904735][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.909223][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.913880][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.919929][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.926067][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 422.931249][T14368] do_fast_syscall_32+0x6b/0xd0 [ 422.936083][T14368] do_SYSENTER_32+0x73/0x90 [ 422.940569][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 422.946872][T14368] [ 422.949182][T14368] Uninit was stored to memory at: [ 422.954189][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 422.959892][T14368] __msan_chain_origin+0x50/0x90 [ 422.964815][T14368] __get_compat_msghdr+0x5be/0x890 [ 422.969912][T14368] get_compat_msghdr+0x108/0x270 [ 422.974834][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 422.979320][T14368] __sys_recvmmsg+0x4ca/0x510 [ 422.983979][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 422.990027][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 422.996164][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.001347][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.006183][T14368] do_SYSENTER_32+0x73/0x90 [ 423.010671][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.016972][T14368] [ 423.019297][T14368] Uninit was stored to memory at: [ 423.024306][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.030007][T14368] __msan_chain_origin+0x50/0x90 [ 423.034929][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.040024][T14368] get_compat_msghdr+0x108/0x270 [ 423.044944][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.049430][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.054095][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.060145][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.066282][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.071463][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.076297][T14368] do_SYSENTER_32+0x73/0x90 [ 423.080781][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.087083][T14368] [ 423.089395][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 423.096054][T14368] do_recvmmsg+0xc5/0x1ee0 [ 423.100454][T14368] do_recvmmsg+0xc5/0x1ee0 [ 423.308595][T14368] not chained 210000 origins [ 423.313247][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 423.321918][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.331985][T14368] Call Trace: [ 423.335284][T14368] dump_stack+0x1df/0x240 [ 423.339627][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 423.345350][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 423.351157][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 423.357237][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 423.362021][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 423.367128][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 423.372665][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 423.378743][T14368] ? _copy_from_user+0x15b/0x260 [ 423.383666][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 423.388764][T14368] __msan_chain_origin+0x50/0x90 [ 423.393696][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.398807][T14368] get_compat_msghdr+0x108/0x270 [ 423.403757][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.408256][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 423.413888][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 423.418987][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 423.424607][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 423.429880][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 423.434644][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 423.439401][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 423.444591][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.449269][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.455327][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 423.461558][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.467703][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.472896][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.477735][T14368] do_SYSENTER_32+0x73/0x90 [ 423.482225][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.488535][T14368] RIP: 0023:0xf7f77549 [ 423.492583][T14368] Code: Bad RIP value. [ 423.496632][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 423.505135][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 423.513102][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 423.521067][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.529027][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 423.536984][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.544956][T14368] Uninit was stored to memory at: [ 423.549973][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.555676][T14368] __msan_chain_origin+0x50/0x90 [ 423.560614][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.565711][T14368] get_compat_msghdr+0x108/0x270 [ 423.570633][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.575122][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.579782][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.585835][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.591982][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.597183][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.602277][T14368] do_SYSENTER_32+0x73/0x90 [ 423.606762][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.613064][T14368] [ 423.615371][T14368] Uninit was stored to memory at: [ 423.620382][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.626084][T14368] __msan_chain_origin+0x50/0x90 [ 423.631007][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.636102][T14368] get_compat_msghdr+0x108/0x270 [ 423.641021][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.645508][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.650176][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.656229][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.662363][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.667544][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.672379][T14368] do_SYSENTER_32+0x73/0x90 [ 423.676868][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.683172][T14368] [ 423.685483][T14368] Uninit was stored to memory at: [ 423.690488][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.696199][T14368] __msan_chain_origin+0x50/0x90 [ 423.701139][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.706235][T14368] get_compat_msghdr+0x108/0x270 [ 423.711156][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.715643][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.720305][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.726352][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.732489][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.737672][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.742508][T14368] do_SYSENTER_32+0x73/0x90 [ 423.746998][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.753298][T14368] [ 423.755614][T14368] Uninit was stored to memory at: [ 423.760621][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.766322][T14368] __msan_chain_origin+0x50/0x90 [ 423.771244][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.776348][T14368] get_compat_msghdr+0x108/0x270 [ 423.781280][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.785766][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.790427][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.796475][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.802622][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.807807][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.812641][T14368] do_SYSENTER_32+0x73/0x90 [ 423.817129][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.823432][T14368] [ 423.825741][T14368] Uninit was stored to memory at: [ 423.830748][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.836451][T14368] __msan_chain_origin+0x50/0x90 [ 423.841372][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.846467][T14368] get_compat_msghdr+0x108/0x270 [ 423.851387][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.855873][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.860530][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.866578][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.872716][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.877902][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.882738][T14368] do_SYSENTER_32+0x73/0x90 [ 423.887225][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.893529][T14368] [ 423.895839][T14368] Uninit was stored to memory at: [ 423.900847][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.906549][T14368] __msan_chain_origin+0x50/0x90 [ 423.911473][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.916570][T14368] get_compat_msghdr+0x108/0x270 [ 423.921488][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.925992][T14368] __sys_recvmmsg+0x4ca/0x510 [ 423.930651][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 423.936699][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 423.942839][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 423.948029][T14368] do_fast_syscall_32+0x6b/0xd0 [ 423.952863][T14368] do_SYSENTER_32+0x73/0x90 [ 423.957349][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 423.963649][T14368] [ 423.965960][T14368] Uninit was stored to memory at: [ 423.970980][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 423.976682][T14368] __msan_chain_origin+0x50/0x90 [ 423.981601][T14368] __get_compat_msghdr+0x5be/0x890 [ 423.986696][T14368] get_compat_msghdr+0x108/0x270 [ 423.991615][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 423.996101][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.000766][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.006813][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.012956][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.018138][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.022973][T14368] do_SYSENTER_32+0x73/0x90 [ 424.027548][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.033850][T14368] [ 424.036160][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 424.042816][T14368] do_recvmmsg+0xc5/0x1ee0 [ 424.047230][T14368] do_recvmmsg+0xc5/0x1ee0 [ 424.221940][T14368] not chained 220000 origins [ 424.226591][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 424.235261][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.245316][T14368] Call Trace: [ 424.248613][T14368] dump_stack+0x1df/0x240 [ 424.252951][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 424.258772][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 424.264581][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 424.270655][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 424.275448][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 424.280558][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 424.286108][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 424.292181][T14368] ? _copy_from_user+0x15b/0x260 [ 424.297145][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 424.302260][T14368] __msan_chain_origin+0x50/0x90 [ 424.307222][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.312373][T14368] get_compat_msghdr+0x108/0x270 [ 424.317324][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.321841][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 424.327488][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 424.332606][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 424.338239][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 424.343515][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 424.348267][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 424.353016][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 424.358203][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.362877][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.368933][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 424.375176][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.381331][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.386533][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.391376][T14368] do_SYSENTER_32+0x73/0x90 [ 424.395870][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.402178][T14368] RIP: 0023:0xf7f77549 [ 424.406227][T14368] Code: Bad RIP value. [ 424.410276][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 424.418672][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 424.426626][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 424.434583][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.442538][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 424.450492][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.458455][T14368] Uninit was stored to memory at: [ 424.463468][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 424.469170][T14368] __msan_chain_origin+0x50/0x90 [ 424.474092][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.479189][T14368] get_compat_msghdr+0x108/0x270 [ 424.484111][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.488598][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.493259][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.499308][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.505446][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.510628][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.515463][T14368] do_SYSENTER_32+0x73/0x90 [ 424.519950][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.526251][T14368] [ 424.528563][T14368] Uninit was stored to memory at: [ 424.533571][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 424.539287][T14368] __msan_chain_origin+0x50/0x90 [ 424.544211][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.549311][T14368] get_compat_msghdr+0x108/0x270 [ 424.554231][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.558717][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.563380][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.569428][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.575565][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.580747][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.585580][T14368] do_SYSENTER_32+0x73/0x90 [ 424.590069][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.596391][T14368] [ 424.598702][T14368] Uninit was stored to memory at: [ 424.603713][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 424.609418][T14368] __msan_chain_origin+0x50/0x90 [ 424.614342][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.619473][T14368] get_compat_msghdr+0x108/0x270 [ 424.624394][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.628882][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.633541][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.639588][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.645723][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.650905][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.655739][T14368] do_SYSENTER_32+0x73/0x90 [ 424.660228][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.666531][T14368] [ 424.668841][T14368] Uninit was stored to memory at: [ 424.673851][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 424.679551][T14368] __msan_chain_origin+0x50/0x90 [ 424.684474][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.689573][T14368] get_compat_msghdr+0x108/0x270 [ 424.694494][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.698982][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.703644][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.709695][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.715831][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.721015][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.725852][T14368] do_SYSENTER_32+0x73/0x90 [ 424.730337][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.736639][T14368] [ 424.738955][T14368] Uninit was stored to memory at: [ 424.743962][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 424.749664][T14368] __msan_chain_origin+0x50/0x90 [ 424.754587][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.759683][T14368] get_compat_msghdr+0x108/0x270 [ 424.764605][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.769091][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.773749][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.779797][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.785932][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.791112][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.795945][T14368] do_SYSENTER_32+0x73/0x90 [ 424.800430][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.806755][T14368] [ 424.809068][T14368] Uninit was stored to memory at: [ 424.814080][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 424.819782][T14368] __msan_chain_origin+0x50/0x90 [ 424.824705][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.829801][T14368] get_compat_msghdr+0x108/0x270 [ 424.834722][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.839208][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.843866][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.849915][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.856052][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.861240][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.866077][T14368] do_SYSENTER_32+0x73/0x90 [ 424.870565][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.876865][T14368] [ 424.879184][T14368] Uninit was stored to memory at: [ 424.884192][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 424.889894][T14368] __msan_chain_origin+0x50/0x90 [ 424.894817][T14368] __get_compat_msghdr+0x5be/0x890 [ 424.899914][T14368] get_compat_msghdr+0x108/0x270 [ 424.904834][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 424.909320][T14368] __sys_recvmmsg+0x4ca/0x510 [ 424.913981][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 424.920031][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 424.926173][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 424.931376][T14368] do_fast_syscall_32+0x6b/0xd0 [ 424.936213][T14368] do_SYSENTER_32+0x73/0x90 [ 424.940704][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 424.947006][T14368] [ 424.949317][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 424.955975][T14368] do_recvmmsg+0xc5/0x1ee0 [ 424.960377][T14368] do_recvmmsg+0xc5/0x1ee0 [ 425.108082][T14368] not chained 230000 origins [ 425.112707][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 425.121476][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.131524][T14368] Call Trace: [ 425.134820][T14368] dump_stack+0x1df/0x240 [ 425.139162][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 425.144882][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 425.150691][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 425.156759][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 425.161540][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 425.166663][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 425.172219][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 425.178310][T14368] ? _copy_from_user+0x15b/0x260 [ 425.183254][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 425.188592][T14368] __msan_chain_origin+0x50/0x90 [ 425.193542][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.198794][T14368] get_compat_msghdr+0x108/0x270 [ 425.203745][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.208262][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 425.213920][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 425.219043][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 425.224688][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 425.229984][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 425.234749][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 425.239517][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 425.244721][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.249416][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.255494][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 425.261742][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.267906][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.273125][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.277988][T14368] do_SYSENTER_32+0x73/0x90 [ 425.282499][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.288823][T14368] RIP: 0023:0xf7f77549 [ 425.292875][T14368] Code: Bad RIP value. [ 425.296927][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 425.305335][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 425.313297][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 425.321254][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.329208][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 425.337165][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.345130][T14368] Uninit was stored to memory at: [ 425.350143][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 425.355848][T14368] __msan_chain_origin+0x50/0x90 [ 425.360774][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.365869][T14368] get_compat_msghdr+0x108/0x270 [ 425.370794][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.375282][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.379960][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.386121][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.392264][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.397459][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.402297][T14368] do_SYSENTER_32+0x73/0x90 [ 425.406788][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.413092][T14368] [ 425.415400][T14368] Uninit was stored to memory at: [ 425.420439][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 425.426145][T14368] __msan_chain_origin+0x50/0x90 [ 425.431066][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.436161][T14368] get_compat_msghdr+0x108/0x270 [ 425.441097][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.445583][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.450245][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.456294][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.462434][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.467618][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.472454][T14368] do_SYSENTER_32+0x73/0x90 [ 425.476941][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.483250][T14368] [ 425.485558][T14368] Uninit was stored to memory at: [ 425.490568][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 425.496271][T14368] __msan_chain_origin+0x50/0x90 [ 425.501194][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.506289][T14368] get_compat_msghdr+0x108/0x270 [ 425.511210][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.515695][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.520352][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.526402][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.532539][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.537723][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.542554][T14368] do_SYSENTER_32+0x73/0x90 [ 425.547039][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.553339][T14368] [ 425.555648][T14368] Uninit was stored to memory at: [ 425.560657][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 425.566359][T14368] __msan_chain_origin+0x50/0x90 [ 425.571283][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.576380][T14368] get_compat_msghdr+0x108/0x270 [ 425.581301][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.585789][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.590451][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.596501][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.602636][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.607816][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.612651][T14368] do_SYSENTER_32+0x73/0x90 [ 425.617139][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.623526][T14368] [ 425.625833][T14368] Uninit was stored to memory at: [ 425.630842][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 425.636548][T14368] __msan_chain_origin+0x50/0x90 [ 425.641470][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.646566][T14368] get_compat_msghdr+0x108/0x270 [ 425.651487][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.655974][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.660648][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.666700][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.672838][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.678022][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.682853][T14368] do_SYSENTER_32+0x73/0x90 [ 425.687339][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.693640][T14368] [ 425.695953][T14368] Uninit was stored to memory at: [ 425.700962][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 425.706682][T14368] __msan_chain_origin+0x50/0x90 [ 425.711607][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.716702][T14368] get_compat_msghdr+0x108/0x270 [ 425.721623][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.726111][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.730771][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.736820][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.742973][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.748158][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.752996][T14368] do_SYSENTER_32+0x73/0x90 [ 425.757481][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.763791][T14368] [ 425.766099][T14368] Uninit was stored to memory at: [ 425.771106][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 425.776807][T14368] __msan_chain_origin+0x50/0x90 [ 425.781728][T14368] __get_compat_msghdr+0x5be/0x890 [ 425.786825][T14368] get_compat_msghdr+0x108/0x270 [ 425.791874][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 425.796362][T14368] __sys_recvmmsg+0x4ca/0x510 [ 425.801022][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 425.807072][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 425.813209][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 425.818391][T14368] do_fast_syscall_32+0x6b/0xd0 [ 425.823227][T14368] do_SYSENTER_32+0x73/0x90 [ 425.827716][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 425.834018][T14368] [ 425.836325][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 425.842982][T14368] do_recvmmsg+0xc5/0x1ee0 [ 425.847382][T14368] do_recvmmsg+0xc5/0x1ee0 [ 425.995862][T14368] not chained 240000 origins [ 426.000473][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 426.009137][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.019195][T14368] Call Trace: [ 426.022490][T14368] dump_stack+0x1df/0x240 [ 426.026827][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 426.032542][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 426.038437][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 426.044504][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 426.049292][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 426.054408][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 426.059959][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 426.066029][T14368] ? _copy_from_user+0x15b/0x260 [ 426.070970][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 426.076083][T14368] __msan_chain_origin+0x50/0x90 [ 426.081032][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.086156][T14368] get_compat_msghdr+0x108/0x270 [ 426.091103][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.095614][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 426.101263][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 426.106404][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 426.112036][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 426.117327][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 426.122092][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 426.126861][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 426.132066][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.136764][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.142821][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 426.149048][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.155188][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.160377][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.165229][T14368] do_SYSENTER_32+0x73/0x90 [ 426.169718][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.176029][T14368] RIP: 0023:0xf7f77549 [ 426.180076][T14368] Code: Bad RIP value. [ 426.184222][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 426.192617][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 426.200572][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 426.208538][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 426.216611][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 426.224571][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 426.232536][T14368] Uninit was stored to memory at: [ 426.237553][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 426.243255][T14368] __msan_chain_origin+0x50/0x90 [ 426.248180][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.253298][T14368] get_compat_msghdr+0x108/0x270 [ 426.258220][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.262707][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.267369][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.273422][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.279576][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.284760][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.289593][T14368] do_SYSENTER_32+0x73/0x90 [ 426.294078][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.300384][T14368] [ 426.302691][T14368] Uninit was stored to memory at: [ 426.307702][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 426.313403][T14368] __msan_chain_origin+0x50/0x90 [ 426.318326][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.323422][T14368] get_compat_msghdr+0x108/0x270 [ 426.328344][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.332837][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.337496][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.343547][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.349684][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.354866][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.359701][T14368] do_SYSENTER_32+0x73/0x90 [ 426.364184][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.370494][T14368] [ 426.372809][T14368] Uninit was stored to memory at: [ 426.377823][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 426.383533][T14368] __msan_chain_origin+0x50/0x90 [ 426.388462][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.393563][T14368] get_compat_msghdr+0x108/0x270 [ 426.398489][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.402978][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.407642][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.413688][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.419825][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.425008][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.429843][T14368] do_SYSENTER_32+0x73/0x90 [ 426.434340][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.440742][T14368] [ 426.443062][T14368] Uninit was stored to memory at: [ 426.448083][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 426.453788][T14368] __msan_chain_origin+0x50/0x90 [ 426.458711][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.463811][T14368] get_compat_msghdr+0x108/0x270 [ 426.468735][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.473224][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.477886][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.483941][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.490081][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.495268][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.500104][T14368] do_SYSENTER_32+0x73/0x90 [ 426.504606][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.510929][T14368] [ 426.513267][T14368] Uninit was stored to memory at: [ 426.518288][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 426.523992][T14368] __msan_chain_origin+0x50/0x90 [ 426.528917][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.534014][T14368] get_compat_msghdr+0x108/0x270 [ 426.538935][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.543423][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.548085][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.554133][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.560273][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.565458][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.570298][T14368] do_SYSENTER_32+0x73/0x90 [ 426.574786][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.581091][T14368] [ 426.583399][T14368] Uninit was stored to memory at: [ 426.588407][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 426.594118][T14368] __msan_chain_origin+0x50/0x90 [ 426.599043][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.604138][T14368] get_compat_msghdr+0x108/0x270 [ 426.609059][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.613547][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.618209][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.624259][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.630396][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.635581][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.640415][T14368] do_SYSENTER_32+0x73/0x90 [ 426.644901][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.651216][T14368] [ 426.653534][T14368] Uninit was stored to memory at: [ 426.658539][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 426.664244][T14368] __msan_chain_origin+0x50/0x90 [ 426.669167][T14368] __get_compat_msghdr+0x5be/0x890 [ 426.674265][T14368] get_compat_msghdr+0x108/0x270 [ 426.679186][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 426.683675][T14368] __sys_recvmmsg+0x4ca/0x510 [ 426.688334][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 426.694385][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 426.700521][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 426.705707][T14368] do_fast_syscall_32+0x6b/0xd0 [ 426.710541][T14368] do_SYSENTER_32+0x73/0x90 [ 426.715035][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 426.721337][T14368] [ 426.723650][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 426.730306][T14368] do_recvmmsg+0xc5/0x1ee0 [ 426.734704][T14368] do_recvmmsg+0xc5/0x1ee0 [ 427.021874][T14368] not chained 250000 origins [ 427.026505][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 427.035173][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.045230][T14368] Call Trace: [ 427.048535][T14368] dump_stack+0x1df/0x240 [ 427.052877][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 427.058605][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 427.064414][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 427.070477][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 427.075227][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 427.080311][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 427.085838][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 427.091881][T14368] ? _copy_from_user+0x15b/0x260 [ 427.096795][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 427.101886][T14368] __msan_chain_origin+0x50/0x90 [ 427.106805][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.111971][T14368] get_compat_msghdr+0x108/0x270 [ 427.116888][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.121371][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 427.126988][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 427.132088][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 427.137708][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 427.143067][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 427.147804][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 427.152541][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 427.157713][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.162371][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.168415][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 427.174628][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.180755][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.185930][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.190754][T14368] do_SYSENTER_32+0x73/0x90 [ 427.195236][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.201629][T14368] RIP: 0023:0xf7f77549 [ 427.205681][T14368] Code: Bad RIP value. [ 427.209779][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 427.218168][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 427.226115][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 427.234063][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.242008][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 427.249973][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.257925][T14368] Uninit was stored to memory at: [ 427.262934][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 427.268627][T14368] __msan_chain_origin+0x50/0x90 [ 427.273538][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.278620][T14368] get_compat_msghdr+0x108/0x270 [ 427.283617][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.288104][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.292752][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.298788][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.304915][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.310088][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.314913][T14368] do_SYSENTER_32+0x73/0x90 [ 427.319526][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.325819][T14368] [ 427.328119][T14368] Uninit was stored to memory at: [ 427.333113][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 427.338806][T14368] __msan_chain_origin+0x50/0x90 [ 427.343715][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.348812][T14368] get_compat_msghdr+0x108/0x270 [ 427.353722][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.358199][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.362962][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.369009][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.375147][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.380324][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.385153][T14368] do_SYSENTER_32+0x73/0x90 [ 427.389631][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.395925][T14368] [ 427.398226][T14368] Uninit was stored to memory at: [ 427.403227][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 427.408919][T14368] __msan_chain_origin+0x50/0x90 [ 427.413831][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.418914][T14368] get_compat_msghdr+0x108/0x270 [ 427.423822][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.428298][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.432947][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.438986][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.445112][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.450283][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.455105][T14368] do_SYSENTER_32+0x73/0x90 [ 427.459582][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.465875][T14368] [ 427.468174][T14368] Uninit was stored to memory at: [ 427.473173][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 427.478866][T14368] __msan_chain_origin+0x50/0x90 [ 427.483777][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.488862][T14368] get_compat_msghdr+0x108/0x270 [ 427.493773][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.498251][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.502899][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.508939][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.515068][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.520238][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.525062][T14368] do_SYSENTER_32+0x73/0x90 [ 427.529538][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.535831][T14368] [ 427.538132][T14368] Uninit was stored to memory at: [ 427.543130][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 427.548824][T14368] __msan_chain_origin+0x50/0x90 [ 427.553736][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.558820][T14368] get_compat_msghdr+0x108/0x270 [ 427.563730][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.568212][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.572860][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.578900][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.585031][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.590218][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.595046][T14368] do_SYSENTER_32+0x73/0x90 [ 427.599524][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.605843][T14368] [ 427.608147][T14368] Uninit was stored to memory at: [ 427.613147][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 427.618839][T14368] __msan_chain_origin+0x50/0x90 [ 427.623767][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.628856][T14368] get_compat_msghdr+0x108/0x270 [ 427.633767][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.638244][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.642891][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.648930][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.655055][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.660225][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.665114][T14368] do_SYSENTER_32+0x73/0x90 [ 427.669591][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.675887][T14368] [ 427.678188][T14368] Uninit was stored to memory at: [ 427.683185][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 427.688877][T14368] __msan_chain_origin+0x50/0x90 [ 427.693787][T14368] __get_compat_msghdr+0x5be/0x890 [ 427.698873][T14368] get_compat_msghdr+0x108/0x270 [ 427.703783][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 427.708259][T14368] __sys_recvmmsg+0x4ca/0x510 [ 427.712908][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 427.718945][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 427.725072][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 427.730329][T14368] do_fast_syscall_32+0x6b/0xd0 [ 427.735161][T14368] do_SYSENTER_32+0x73/0x90 [ 427.739672][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.745967][T14368] [ 427.748268][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 427.754914][T14368] do_recvmmsg+0xc5/0x1ee0 [ 427.759304][T14368] do_recvmmsg+0xc5/0x1ee0 [ 427.914161][T14368] not chained 260000 origins [ 427.918791][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 427.927458][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.937526][T14368] Call Trace: [ 427.940827][T14368] dump_stack+0x1df/0x240 [ 427.945165][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 427.950899][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 427.956704][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 427.962766][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 427.967547][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 427.972661][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 427.978210][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 427.984284][T14368] ? _copy_from_user+0x15b/0x260 [ 427.989224][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 427.994333][T14368] __msan_chain_origin+0x50/0x90 [ 427.999275][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.004404][T14368] get_compat_msghdr+0x108/0x270 [ 428.009361][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.013874][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 428.019528][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 428.024641][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 428.030278][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 428.035576][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 428.040337][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 428.045099][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 428.050304][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.054997][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.061069][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 428.067341][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.073498][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.078705][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.083560][T14368] do_SYSENTER_32+0x73/0x90 [ 428.088066][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.094387][T14368] RIP: 0023:0xf7f77549 [ 428.098443][T14368] Code: Bad RIP value. [ 428.102509][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 428.110995][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 428.118945][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 428.126894][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.134842][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 428.142787][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.150755][T14368] Uninit was stored to memory at: [ 428.155758][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 428.161447][T14368] __msan_chain_origin+0x50/0x90 [ 428.166358][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.171441][T14368] get_compat_msghdr+0x108/0x270 [ 428.176348][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.180822][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.185484][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.191529][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.197684][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.202871][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.207694][T14368] do_SYSENTER_32+0x73/0x90 [ 428.212170][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.218460][T14368] [ 428.220758][T14368] Uninit was stored to memory at: [ 428.225755][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 428.231446][T14368] __msan_chain_origin+0x50/0x90 [ 428.236355][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.241436][T14368] get_compat_msghdr+0x108/0x270 [ 428.246347][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.250836][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.255484][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.261517][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.267640][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.272811][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.277634][T14368] do_SYSENTER_32+0x73/0x90 [ 428.282105][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.288395][T14368] [ 428.290694][T14368] Uninit was stored to memory at: [ 428.295691][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 428.301382][T14368] __msan_chain_origin+0x50/0x90 [ 428.306345][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.311431][T14368] get_compat_msghdr+0x108/0x270 [ 428.316367][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.320841][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.325488][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.331674][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.337814][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.342993][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.347822][T14368] do_SYSENTER_32+0x73/0x90 [ 428.352302][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.358599][T14368] [ 428.360901][T14368] Uninit was stored to memory at: [ 428.365900][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 428.371592][T14368] __msan_chain_origin+0x50/0x90 [ 428.376644][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.381742][T14368] get_compat_msghdr+0x108/0x270 [ 428.386712][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.391195][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.395885][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.401925][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.408056][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.413229][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.418049][T14368] do_SYSENTER_32+0x73/0x90 [ 428.422524][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.428817][T14368] [ 428.431117][T14368] Uninit was stored to memory at: [ 428.436115][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 428.441804][T14368] __msan_chain_origin+0x50/0x90 [ 428.446718][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.451803][T14368] get_compat_msghdr+0x108/0x270 [ 428.456721][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.461203][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.465851][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.471889][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.478048][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.483220][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.488045][T14368] do_SYSENTER_32+0x73/0x90 [ 428.492520][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.498847][T14368] [ 428.501146][T14368] Uninit was stored to memory at: [ 428.506142][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 428.511865][T14368] __msan_chain_origin+0x50/0x90 [ 428.516784][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.521864][T14368] get_compat_msghdr+0x108/0x270 [ 428.526774][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.531250][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.535900][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.541989][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.548114][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.553283][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.558145][T14368] do_SYSENTER_32+0x73/0x90 [ 428.562620][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.568913][T14368] [ 428.571215][T14368] Uninit was stored to memory at: [ 428.576210][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 428.581899][T14368] __msan_chain_origin+0x50/0x90 [ 428.586809][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.591893][T14368] get_compat_msghdr+0x108/0x270 [ 428.596818][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.601311][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.605973][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.612011][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.618136][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.623306][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.628128][T14368] do_SYSENTER_32+0x73/0x90 [ 428.632604][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.638897][T14368] [ 428.641199][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 428.647843][T14368] do_recvmmsg+0xc5/0x1ee0 [ 428.652230][T14368] do_recvmmsg+0xc5/0x1ee0 [ 428.792134][T14368] not chained 270000 origins [ 428.796763][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 428.805425][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.815474][T14368] Call Trace: [ 428.818769][T14368] dump_stack+0x1df/0x240 [ 428.823104][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 428.828823][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 428.834627][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 428.840689][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 428.845478][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 428.850590][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 428.856137][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 428.862207][T14368] ? _copy_from_user+0x15b/0x260 [ 428.867144][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 428.872270][T14368] __msan_chain_origin+0x50/0x90 [ 428.877228][T14368] __get_compat_msghdr+0x5be/0x890 [ 428.882356][T14368] get_compat_msghdr+0x108/0x270 [ 428.887306][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 428.891820][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 428.897479][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 428.902590][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 428.908230][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 428.913526][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 428.918290][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 428.923044][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 428.928218][T14368] __sys_recvmmsg+0x4ca/0x510 [ 428.932922][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 428.938964][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 428.945179][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 428.951306][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 428.956482][T14368] do_fast_syscall_32+0x6b/0xd0 [ 428.961304][T14368] do_SYSENTER_32+0x73/0x90 [ 428.965782][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 428.972090][T14368] RIP: 0023:0xf7f77549 [ 428.976130][T14368] Code: Bad RIP value. [ 428.980168][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 428.988647][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 428.996594][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 429.004539][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.012498][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 429.020442][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.028411][T14368] Uninit was stored to memory at: [ 429.033411][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.039116][T14368] __msan_chain_origin+0x50/0x90 [ 429.044025][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.049109][T14368] get_compat_msghdr+0x108/0x270 [ 429.054019][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.058495][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.063144][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.069182][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.075315][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.080522][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.085348][T14368] do_SYSENTER_32+0x73/0x90 [ 429.089823][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.096117][T14368] [ 429.098415][T14368] Uninit was stored to memory at: [ 429.103411][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.109099][T14368] __msan_chain_origin+0x50/0x90 [ 429.114011][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.119093][T14368] get_compat_msghdr+0x108/0x270 [ 429.124002][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.128474][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.133123][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.139185][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.145312][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.150482][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.155305][T14368] do_SYSENTER_32+0x73/0x90 [ 429.159777][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.166073][T14368] [ 429.168387][T14368] Uninit was stored to memory at: [ 429.173383][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.179073][T14368] __msan_chain_origin+0x50/0x90 [ 429.184000][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.189085][T14368] get_compat_msghdr+0x108/0x270 [ 429.194117][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.198608][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.203256][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.209293][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.215417][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.220585][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.225406][T14368] do_SYSENTER_32+0x73/0x90 [ 429.229877][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.236166][T14368] [ 429.238465][T14368] Uninit was stored to memory at: [ 429.243462][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.249154][T14368] __msan_chain_origin+0x50/0x90 [ 429.254065][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.259146][T14368] get_compat_msghdr+0x108/0x270 [ 429.264054][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.268544][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.273193][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.279230][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.285353][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.290521][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.295343][T14368] do_SYSENTER_32+0x73/0x90 [ 429.299819][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.306110][T14368] [ 429.308409][T14368] Uninit was stored to memory at: [ 429.313407][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.319097][T14368] __msan_chain_origin+0x50/0x90 [ 429.324004][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.329086][T14368] get_compat_msghdr+0x108/0x270 [ 429.333992][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.338470][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.343118][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.349154][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.355279][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.360451][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.365273][T14368] do_SYSENTER_32+0x73/0x90 [ 429.369745][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.376043][T14368] [ 429.378348][T14368] Uninit was stored to memory at: [ 429.383350][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.389044][T14368] __msan_chain_origin+0x50/0x90 [ 429.393959][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.399045][T14368] get_compat_msghdr+0x108/0x270 [ 429.403960][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.408437][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.413087][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.419124][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.425250][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.430421][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.435248][T14368] do_SYSENTER_32+0x73/0x90 [ 429.439722][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.446013][T14368] [ 429.448313][T14368] Uninit was stored to memory at: [ 429.453309][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.458999][T14368] __msan_chain_origin+0x50/0x90 [ 429.463908][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.468992][T14368] get_compat_msghdr+0x108/0x270 [ 429.473898][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.478374][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.483021][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.489058][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.495183][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.500401][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.505226][T14368] do_SYSENTER_32+0x73/0x90 [ 429.509701][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.515992][T14368] [ 429.518292][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 429.524937][T14368] do_recvmmsg+0xc5/0x1ee0 [ 429.529328][T14368] do_recvmmsg+0xc5/0x1ee0 [ 429.662645][T14368] not chained 280000 origins [ 429.667274][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 429.675939][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.685988][T14368] Call Trace: [ 429.689282][T14368] dump_stack+0x1df/0x240 [ 429.693619][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 429.699340][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 429.705147][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 429.711212][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 429.715997][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 429.721107][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 429.726652][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 429.732741][T14368] ? _copy_from_user+0x15b/0x260 [ 429.737678][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 429.742875][T14368] __msan_chain_origin+0x50/0x90 [ 429.747820][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.752948][T14368] get_compat_msghdr+0x108/0x270 [ 429.757895][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.762409][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 429.768054][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 429.773165][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 429.778800][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 429.784105][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 429.788866][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 429.793628][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 429.798828][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.803517][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.809593][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 429.815836][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.821996][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.827226][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.832070][T14368] do_SYSENTER_32+0x73/0x90 [ 429.836552][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.842848][T14368] RIP: 0023:0xf7f77549 [ 429.846883][T14368] Code: Bad RIP value. [ 429.850921][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 429.859305][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 429.867250][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 429.875195][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.883138][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 429.891193][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.899143][T14368] Uninit was stored to memory at: [ 429.904143][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.909842][T14368] __msan_chain_origin+0x50/0x90 [ 429.914793][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.919907][T14368] get_compat_msghdr+0x108/0x270 [ 429.924817][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.929292][T14368] __sys_recvmmsg+0x4ca/0x510 [ 429.933941][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 429.939979][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 429.946104][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 429.951275][T14368] do_fast_syscall_32+0x6b/0xd0 [ 429.956095][T14368] do_SYSENTER_32+0x73/0x90 [ 429.960568][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 429.966860][T14368] [ 429.969156][T14368] Uninit was stored to memory at: [ 429.974152][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 429.979900][T14368] __msan_chain_origin+0x50/0x90 [ 429.984809][T14368] __get_compat_msghdr+0x5be/0x890 [ 429.989892][T14368] get_compat_msghdr+0x108/0x270 [ 429.994817][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 429.999291][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.003939][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.009989][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.016128][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.021298][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.026121][T14368] do_SYSENTER_32+0x73/0x90 [ 430.030594][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.036884][T14368] [ 430.039183][T14368] Uninit was stored to memory at: [ 430.044279][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.049982][T14368] __msan_chain_origin+0x50/0x90 [ 430.054892][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.059977][T14368] get_compat_msghdr+0x108/0x270 [ 430.064974][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.069451][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.074098][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.080240][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.086362][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.091551][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.096373][T14368] do_SYSENTER_32+0x73/0x90 [ 430.100849][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.107139][T14368] [ 430.109439][T14368] Uninit was stored to memory at: [ 430.114436][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.120214][T14368] __msan_chain_origin+0x50/0x90 [ 430.125128][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.130212][T14368] get_compat_msghdr+0x108/0x270 [ 430.135121][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.139594][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.144262][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.150302][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.156426][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.161595][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.166416][T14368] do_SYSENTER_32+0x73/0x90 [ 430.170946][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.177240][T14368] [ 430.179545][T14368] Uninit was stored to memory at: [ 430.184560][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.190262][T14368] __msan_chain_origin+0x50/0x90 [ 430.195179][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.200369][T14368] get_compat_msghdr+0x108/0x270 [ 430.205282][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.209758][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.214406][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.220461][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.226587][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.231754][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.236587][T14368] do_SYSENTER_32+0x73/0x90 [ 430.241060][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.247355][T14368] [ 430.249653][T14368] Uninit was stored to memory at: [ 430.254650][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.260337][T14368] __msan_chain_origin+0x50/0x90 [ 430.265247][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.270375][T14368] get_compat_msghdr+0x108/0x270 [ 430.275286][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.279763][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.284412][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.290448][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.296582][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.301749][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.306573][T14368] do_SYSENTER_32+0x73/0x90 [ 430.311086][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.317414][T14368] [ 430.319713][T14368] Uninit was stored to memory at: [ 430.324711][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.330400][T14368] __msan_chain_origin+0x50/0x90 [ 430.335312][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.340394][T14368] get_compat_msghdr+0x108/0x270 [ 430.345305][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.349778][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.354522][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.360570][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.366696][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.371878][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.376707][T14368] do_SYSENTER_32+0x73/0x90 [ 430.381189][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.387486][T14368] [ 430.389827][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 430.396481][T14368] do_recvmmsg+0xc5/0x1ee0 [ 430.400871][T14368] do_recvmmsg+0xc5/0x1ee0 [ 430.536669][T14368] not chained 290000 origins [ 430.541292][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 430.550129][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.560179][T14368] Call Trace: [ 430.563489][T14368] dump_stack+0x1df/0x240 [ 430.567827][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 430.573550][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 430.579356][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 430.585421][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 430.590199][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 430.595308][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 430.600854][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 430.606924][T14368] ? _copy_from_user+0x15b/0x260 [ 430.611860][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 430.616968][T14368] __msan_chain_origin+0x50/0x90 [ 430.621909][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.627035][T14368] get_compat_msghdr+0x108/0x270 [ 430.631979][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.636508][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 430.642154][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 430.647266][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 430.652899][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 430.658184][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 430.662947][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 430.667711][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 430.672909][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.677597][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.683667][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 430.689898][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.696029][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.701206][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.706031][T14368] do_SYSENTER_32+0x73/0x90 [ 430.710508][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.716803][T14368] RIP: 0023:0xf7f77549 [ 430.720975][T14368] Code: Bad RIP value. [ 430.725012][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 430.733394][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 430.741344][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 430.749293][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.757237][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 430.765182][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.773135][T14368] Uninit was stored to memory at: [ 430.778134][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.783822][T14368] __msan_chain_origin+0x50/0x90 [ 430.788735][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.793821][T14368] get_compat_msghdr+0x108/0x270 [ 430.798731][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.803207][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.807856][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.813893][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.820070][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.825245][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.830068][T14368] do_SYSENTER_32+0x73/0x90 [ 430.834546][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.840838][T14368] [ 430.843137][T14368] Uninit was stored to memory at: [ 430.848134][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.853871][T14368] __msan_chain_origin+0x50/0x90 [ 430.858784][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.863871][T14368] get_compat_msghdr+0x108/0x270 [ 430.868825][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.873339][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.877987][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.884071][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.890200][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.895373][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.900209][T14368] do_SYSENTER_32+0x73/0x90 [ 430.904684][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.910976][T14368] [ 430.913275][T14368] Uninit was stored to memory at: [ 430.918275][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.923964][T14368] __msan_chain_origin+0x50/0x90 [ 430.928877][T14368] __get_compat_msghdr+0x5be/0x890 [ 430.933959][T14368] get_compat_msghdr+0x108/0x270 [ 430.938867][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 430.943342][T14368] __sys_recvmmsg+0x4ca/0x510 [ 430.947991][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 430.954028][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 430.960153][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 430.965323][T14368] do_fast_syscall_32+0x6b/0xd0 [ 430.970145][T14368] do_SYSENTER_32+0x73/0x90 [ 430.974620][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 430.981010][T14368] [ 430.983310][T14368] Uninit was stored to memory at: [ 430.988306][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 430.993999][T14368] __msan_chain_origin+0x50/0x90 [ 430.998915][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.003996][T14368] get_compat_msghdr+0x108/0x270 [ 431.008906][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.013379][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.018025][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.024060][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.030186][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.035357][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.040178][T14368] do_SYSENTER_32+0x73/0x90 [ 431.044653][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.050944][T14368] [ 431.053241][T14368] Uninit was stored to memory at: [ 431.058235][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.063938][T14368] __msan_chain_origin+0x50/0x90 [ 431.068849][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.073947][T14368] get_compat_msghdr+0x108/0x270 [ 431.078855][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.083417][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.088168][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.094205][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.100330][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.105508][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.110329][T14368] do_SYSENTER_32+0x73/0x90 [ 431.114820][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.121110][T14368] [ 431.123409][T14368] Uninit was stored to memory at: [ 431.128405][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.134093][T14368] __msan_chain_origin+0x50/0x90 [ 431.139019][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.144100][T14368] get_compat_msghdr+0x108/0x270 [ 431.149008][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.153484][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.158131][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.164166][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.170290][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.175465][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.180287][T14368] do_SYSENTER_32+0x73/0x90 [ 431.184761][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.191053][T14368] [ 431.193353][T14368] Uninit was stored to memory at: [ 431.198351][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.204057][T14368] __msan_chain_origin+0x50/0x90 [ 431.208966][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.214050][T14368] get_compat_msghdr+0x108/0x270 [ 431.218959][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.223436][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.228084][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.234135][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.240261][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.245433][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.250256][T14368] do_SYSENTER_32+0x73/0x90 [ 431.254733][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.261051][T14368] [ 431.263368][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 431.270012][T14368] do_recvmmsg+0xc5/0x1ee0 [ 431.274399][T14368] do_recvmmsg+0xc5/0x1ee0 [ 431.408898][T14368] not chained 300000 origins [ 431.413516][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 431.422177][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.432226][T14368] Call Trace: [ 431.435523][T14368] dump_stack+0x1df/0x240 [ 431.439862][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 431.445579][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 431.451384][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 431.457482][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 431.462265][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 431.467376][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 431.472921][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 431.478991][T14368] ? _copy_from_user+0x15b/0x260 [ 431.483926][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 431.489034][T14368] __msan_chain_origin+0x50/0x90 [ 431.493976][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.499120][T14368] get_compat_msghdr+0x108/0x270 [ 431.504067][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.508576][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 431.514221][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 431.519331][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 431.524962][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 431.530248][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 431.535010][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 431.539793][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 431.544992][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.549680][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.555751][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 431.561988][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.568141][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.573336][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.578164][T14368] do_SYSENTER_32+0x73/0x90 [ 431.582657][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.588972][T14368] RIP: 0023:0xf7f77549 [ 431.593020][T14368] Code: Bad RIP value. [ 431.597057][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 431.605441][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 431.613391][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 431.621337][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.629281][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 431.637225][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.645175][T14368] Uninit was stored to memory at: [ 431.650192][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.655883][T14368] __msan_chain_origin+0x50/0x90 [ 431.660795][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.665879][T14368] get_compat_msghdr+0x108/0x270 [ 431.670787][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.675263][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.679913][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.685949][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.692092][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.697272][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.702094][T14368] do_SYSENTER_32+0x73/0x90 [ 431.706570][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.712873][T14368] [ 431.715173][T14368] Uninit was stored to memory at: [ 431.720170][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.725859][T14368] __msan_chain_origin+0x50/0x90 [ 431.730767][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.735850][T14368] get_compat_msghdr+0x108/0x270 [ 431.740759][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.745235][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.749900][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.755938][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.762075][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.767248][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.772069][T14368] do_SYSENTER_32+0x73/0x90 [ 431.776548][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.782840][T14368] [ 431.785148][T14368] Uninit was stored to memory at: [ 431.790146][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.795854][T14368] __msan_chain_origin+0x50/0x90 [ 431.800768][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.805851][T14368] get_compat_msghdr+0x108/0x270 [ 431.810761][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.815238][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.819891][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.825930][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.832054][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.837226][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.842055][T14368] do_SYSENTER_32+0x73/0x90 [ 431.846530][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.852820][T14368] [ 431.855122][T14368] Uninit was stored to memory at: [ 431.860120][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.865808][T14368] __msan_chain_origin+0x50/0x90 [ 431.870730][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.875813][T14368] get_compat_msghdr+0x108/0x270 [ 431.880721][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.885197][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.889861][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.895900][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.902035][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.907228][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.912049][T14368] do_SYSENTER_32+0x73/0x90 [ 431.916524][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.922815][T14368] [ 431.925113][T14368] Uninit was stored to memory at: [ 431.930112][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 431.935802][T14368] __msan_chain_origin+0x50/0x90 [ 431.940712][T14368] __get_compat_msghdr+0x5be/0x890 [ 431.945794][T14368] get_compat_msghdr+0x108/0x270 [ 431.950705][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 431.955180][T14368] __sys_recvmmsg+0x4ca/0x510 [ 431.959826][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 431.965861][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 431.971987][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 431.977158][T14368] do_fast_syscall_32+0x6b/0xd0 [ 431.981981][T14368] do_SYSENTER_32+0x73/0x90 [ 431.986455][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 431.992765][T14368] [ 431.995063][T14368] Uninit was stored to memory at: [ 432.000062][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.005767][T14368] __msan_chain_origin+0x50/0x90 [ 432.010677][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.015762][T14368] get_compat_msghdr+0x108/0x270 [ 432.020670][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.025160][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.029808][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.035848][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.041974][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.047145][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.051972][T14368] do_SYSENTER_32+0x73/0x90 [ 432.056448][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.062742][T14368] [ 432.065040][T14368] Uninit was stored to memory at: [ 432.070039][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.075729][T14368] __msan_chain_origin+0x50/0x90 [ 432.080638][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.085738][T14368] get_compat_msghdr+0x108/0x270 [ 432.090645][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.095119][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.099766][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.105803][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.111928][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.117099][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.121941][T14368] do_SYSENTER_32+0x73/0x90 [ 432.126414][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.132711][T14368] [ 432.135011][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 432.141660][T14368] do_recvmmsg+0xc5/0x1ee0 [ 432.146050][T14368] do_recvmmsg+0xc5/0x1ee0 [ 432.280009][T14368] not chained 310000 origins [ 432.284637][T14368] CPU: 1 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 432.293302][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.303355][T14368] Call Trace: [ 432.306654][T14368] dump_stack+0x1df/0x240 [ 432.310993][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 432.316716][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 432.322530][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 432.328622][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 432.333406][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 432.338523][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 432.344069][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 432.350137][T14368] ? _copy_from_user+0x15b/0x260 [ 432.355136][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 432.360255][T14368] __msan_chain_origin+0x50/0x90 [ 432.365215][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.370349][T14368] get_compat_msghdr+0x108/0x270 [ 432.375301][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.379831][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 432.385477][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 432.390595][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 432.396242][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 432.401530][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 432.406293][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 432.411056][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 432.416268][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.420951][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.427033][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 432.433291][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.439551][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.444787][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.449615][T14368] do_SYSENTER_32+0x73/0x90 [ 432.454095][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.460395][T14368] RIP: 0023:0xf7f77549 [ 432.464432][T14368] Code: Bad RIP value. [ 432.468473][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 432.477002][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 432.484947][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 432.492896][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.500841][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 432.508788][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.516737][T14368] Uninit was stored to memory at: [ 432.521737][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.527428][T14368] __msan_chain_origin+0x50/0x90 [ 432.532338][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.537424][T14368] get_compat_msghdr+0x108/0x270 [ 432.542332][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.546806][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.551457][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.557494][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.563616][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.568786][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.573607][T14368] do_SYSENTER_32+0x73/0x90 [ 432.578081][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.584377][T14368] [ 432.586682][T14368] Uninit was stored to memory at: [ 432.591677][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.597409][T14368] __msan_chain_origin+0x50/0x90 [ 432.602317][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.607404][T14368] get_compat_msghdr+0x108/0x270 [ 432.612314][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.616799][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.621449][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.627487][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.633609][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.638779][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.643602][T14368] do_SYSENTER_32+0x73/0x90 [ 432.648075][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.654370][T14368] [ 432.656676][T14368] Uninit was stored to memory at: [ 432.661797][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.667486][T14368] __msan_chain_origin+0x50/0x90 [ 432.672393][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.677474][T14368] get_compat_msghdr+0x108/0x270 [ 432.682382][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.686858][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.691505][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.697542][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.703666][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.708837][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.713661][T14368] do_SYSENTER_32+0x73/0x90 [ 432.718137][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.724430][T14368] [ 432.726727][T14368] Uninit was stored to memory at: [ 432.731722][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.737455][T14368] __msan_chain_origin+0x50/0x90 [ 432.742364][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.747446][T14368] get_compat_msghdr+0x108/0x270 [ 432.752398][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.756909][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.761556][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.767722][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.773845][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.779015][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.783837][T14368] do_SYSENTER_32+0x73/0x90 [ 432.788313][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.794607][T14368] [ 432.796948][T14368] Uninit was stored to memory at: [ 432.801967][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.807658][T14368] __msan_chain_origin+0x50/0x90 [ 432.812571][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.817655][T14368] get_compat_msghdr+0x108/0x270 [ 432.822597][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.827073][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.831730][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.837783][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.843906][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.849077][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.853900][T14368] do_SYSENTER_32+0x73/0x90 [ 432.858378][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.864671][T14368] [ 432.866973][T14368] Uninit was stored to memory at: [ 432.871971][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.877661][T14368] __msan_chain_origin+0x50/0x90 [ 432.882569][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.887654][T14368] get_compat_msghdr+0x108/0x270 [ 432.892561][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.897034][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.901683][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.907720][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.913844][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.919016][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.923838][T14368] do_SYSENTER_32+0x73/0x90 [ 432.928331][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.934627][T14368] [ 432.936928][T14368] Uninit was stored to memory at: [ 432.941923][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 432.947615][T14368] __msan_chain_origin+0x50/0x90 [ 432.952526][T14368] __get_compat_msghdr+0x5be/0x890 [ 432.957636][T14368] get_compat_msghdr+0x108/0x270 [ 432.962546][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 432.967037][T14368] __sys_recvmmsg+0x4ca/0x510 [ 432.971686][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 432.977722][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 432.983845][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 432.989033][T14368] do_fast_syscall_32+0x6b/0xd0 [ 432.993857][T14368] do_SYSENTER_32+0x73/0x90 [ 432.998332][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.004623][T14368] [ 433.006924][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 433.013570][T14368] do_recvmmsg+0xc5/0x1ee0 [ 433.017957][T14368] do_recvmmsg+0xc5/0x1ee0 [ 433.172706][T14368] not chained 320000 origins [ 433.177331][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 433.186122][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.196168][T14368] Call Trace: [ 433.199459][T14368] dump_stack+0x1df/0x240 [ 433.203798][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 433.209523][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 433.215329][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 433.221394][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 433.226174][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 433.231283][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 433.236828][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 433.242912][T14368] ? _copy_from_user+0x15b/0x260 [ 433.247848][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 433.252958][T14368] __msan_chain_origin+0x50/0x90 [ 433.257900][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.263027][T14368] get_compat_msghdr+0x108/0x270 [ 433.267978][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.272494][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 433.278140][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 433.283253][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 433.288888][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 433.294177][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 433.298946][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 433.303706][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 433.308907][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.313596][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.319667][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 433.325905][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.332060][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.337255][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.342079][T14368] do_SYSENTER_32+0x73/0x90 [ 433.346556][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.352856][T14368] RIP: 0023:0xf7f77549 [ 433.356896][T14368] Code: Bad RIP value. [ 433.360953][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 433.369425][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 433.377417][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 433.385363][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.393304][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 433.401290][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.409365][T14368] Uninit was stored to memory at: [ 433.414382][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 433.420082][T14368] __msan_chain_origin+0x50/0x90 [ 433.424992][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.430074][T14368] get_compat_msghdr+0x108/0x270 [ 433.434983][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.439458][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.444249][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.450298][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.456425][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.461598][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.466429][T14368] do_SYSENTER_32+0x73/0x90 [ 433.470920][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.477214][T14368] [ 433.479515][T14368] Uninit was stored to memory at: [ 433.484514][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 433.490208][T14368] __msan_chain_origin+0x50/0x90 [ 433.495119][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.500200][T14368] get_compat_msghdr+0x108/0x270 [ 433.505130][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.509605][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.514264][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.520312][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.526439][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.531611][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.536434][T14368] do_SYSENTER_32+0x73/0x90 [ 433.540906][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.547210][T14368] [ 433.549560][T14368] Uninit was stored to memory at: [ 433.554558][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 433.560245][T14368] __msan_chain_origin+0x50/0x90 [ 433.565155][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.570239][T14368] get_compat_msghdr+0x108/0x270 [ 433.575160][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.579645][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.584307][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.590355][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.596483][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.601651][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.606473][T14368] do_SYSENTER_32+0x73/0x90 [ 433.610949][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.617242][T14368] [ 433.619539][T14368] Uninit was stored to memory at: [ 433.624536][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 433.630228][T14368] __msan_chain_origin+0x50/0x90 [ 433.635139][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.640222][T14368] get_compat_msghdr+0x108/0x270 [ 433.645130][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.649606][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.654265][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.660312][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.666439][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.671621][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.676443][T14368] do_SYSENTER_32+0x73/0x90 [ 433.680921][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.687221][T14368] [ 433.689534][T14368] Uninit was stored to memory at: [ 433.694533][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 433.700223][T14368] __msan_chain_origin+0x50/0x90 [ 433.705136][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.710220][T14368] get_compat_msghdr+0x108/0x270 [ 433.715128][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.719601][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.724257][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.730306][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.736431][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.741600][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.746423][T14368] do_SYSENTER_32+0x73/0x90 [ 433.750899][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.757209][T14368] [ 433.759506][T14368] Uninit was stored to memory at: [ 433.764502][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 433.770195][T14368] __msan_chain_origin+0x50/0x90 [ 433.775107][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.780189][T14368] get_compat_msghdr+0x108/0x270 [ 433.785098][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.789572][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.794230][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.800287][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.806466][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.811637][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.816469][T14368] do_SYSENTER_32+0x73/0x90 [ 433.820944][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.827239][T14368] [ 433.829538][T14368] Uninit was stored to memory at: [ 433.834537][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 433.840248][T14368] __msan_chain_origin+0x50/0x90 [ 433.845162][T14368] __get_compat_msghdr+0x5be/0x890 [ 433.850246][T14368] get_compat_msghdr+0x108/0x270 [ 433.855156][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 433.859629][T14368] __sys_recvmmsg+0x4ca/0x510 [ 433.864285][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 433.870334][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 433.876478][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 433.881648][T14368] do_fast_syscall_32+0x6b/0xd0 [ 433.886485][T14368] do_SYSENTER_32+0x73/0x90 [ 433.890968][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.897260][T14368] [ 433.899559][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 433.906215][T14368] do_recvmmsg+0xc5/0x1ee0 [ 433.910613][T14368] do_recvmmsg+0xc5/0x1ee0 [ 434.094109][T14368] not chained 330000 origins [ 434.098730][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 434.107394][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.117444][T14368] Call Trace: [ 434.120736][T14368] dump_stack+0x1df/0x240 [ 434.125070][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 434.130787][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 434.136595][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 434.142664][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 434.147425][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 434.152528][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 434.158049][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 434.164089][T14368] ? _copy_from_user+0x15b/0x260 [ 434.168998][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 434.174082][T14368] __msan_chain_origin+0x50/0x90 [ 434.179012][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.184103][T14368] get_compat_msghdr+0x108/0x270 [ 434.189035][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.193866][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 434.199481][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 434.204567][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 434.210174][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 434.215434][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 434.222792][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 434.227528][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 434.232698][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.237383][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.243445][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 434.249668][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.255811][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.260989][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.265816][T14368] do_SYSENTER_32+0x73/0x90 [ 434.270292][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.276588][T14368] RIP: 0023:0xf7f77549 [ 434.280622][T14368] Code: Bad RIP value. [ 434.284660][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 434.293043][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 434.300991][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 434.308936][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.316882][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 434.324832][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.332796][T14368] Uninit was stored to memory at: [ 434.337800][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 434.343493][T14368] __msan_chain_origin+0x50/0x90 [ 434.348406][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.353490][T14368] get_compat_msghdr+0x108/0x270 [ 434.358402][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.362888][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.367569][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.373611][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.379789][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.385004][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.389827][T14368] do_SYSENTER_32+0x73/0x90 [ 434.394313][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.400617][T14368] [ 434.402921][T14368] Uninit was stored to memory at: [ 434.407920][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 434.413610][T14368] __msan_chain_origin+0x50/0x90 [ 434.418521][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.423606][T14368] get_compat_msghdr+0x108/0x270 [ 434.428517][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.433124][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.437790][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.443836][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.449966][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.455151][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.459992][T14368] do_SYSENTER_32+0x73/0x90 [ 434.464470][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.470835][T14368] [ 434.473134][T14368] Uninit was stored to memory at: [ 434.478132][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 434.483823][T14368] __msan_chain_origin+0x50/0x90 [ 434.488736][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.493820][T14368] get_compat_msghdr+0x108/0x270 [ 434.498732][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.503210][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.507860][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.513899][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.520034][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.525299][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.530127][T14368] do_SYSENTER_32+0x73/0x90 [ 434.534609][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.540906][T14368] [ 434.543208][T14368] Uninit was stored to memory at: [ 434.548208][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 434.553898][T14368] __msan_chain_origin+0x50/0x90 [ 434.558855][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.563954][T14368] get_compat_msghdr+0x108/0x270 [ 434.568867][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.573343][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.577990][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.584028][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.590153][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.595329][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.600150][T14368] do_SYSENTER_32+0x73/0x90 [ 434.604626][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.610931][T14368] [ 434.613232][T14368] Uninit was stored to memory at: [ 434.618268][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 434.623962][T14368] __msan_chain_origin+0x50/0x90 [ 434.628873][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.633957][T14368] get_compat_msghdr+0x108/0x270 [ 434.638877][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.643351][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.648001][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.654038][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.660207][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.665380][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.670218][T14368] do_SYSENTER_32+0x73/0x90 [ 434.674715][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.681021][T14368] [ 434.683334][T14368] Uninit was stored to memory at: [ 434.688338][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 434.694030][T14368] __msan_chain_origin+0x50/0x90 [ 434.698945][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.704028][T14368] get_compat_msghdr+0x108/0x270 [ 434.708938][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.713411][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.718062][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.724108][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.730280][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.735457][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.740290][T14368] do_SYSENTER_32+0x73/0x90 [ 434.744764][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.751055][T14368] [ 434.753355][T14368] Uninit was stored to memory at: [ 434.758355][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 434.764046][T14368] __msan_chain_origin+0x50/0x90 [ 434.768958][T14368] __get_compat_msghdr+0x5be/0x890 [ 434.774134][T14368] get_compat_msghdr+0x108/0x270 [ 434.779088][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 434.783563][T14368] __sys_recvmmsg+0x4ca/0x510 [ 434.788259][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 434.794313][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 434.800448][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 434.805623][T14368] do_fast_syscall_32+0x6b/0xd0 [ 434.810445][T14368] do_SYSENTER_32+0x73/0x90 [ 434.814925][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 434.821219][T14368] [ 434.823518][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 434.830165][T14368] do_recvmmsg+0xc5/0x1ee0 [ 434.834556][T14368] do_recvmmsg+0xc5/0x1ee0 [ 435.021802][T14368] not chained 340000 origins [ 435.026423][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 435.035084][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.045133][T14368] Call Trace: [ 435.048429][T14368] dump_stack+0x1df/0x240 [ 435.052768][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 435.058489][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 435.064291][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 435.070354][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 435.075135][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 435.080247][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 435.085793][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 435.091863][T14368] ? _copy_from_user+0x15b/0x260 [ 435.096800][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 435.101946][T14368] __msan_chain_origin+0x50/0x90 [ 435.106900][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.112007][T14368] get_compat_msghdr+0x108/0x270 [ 435.116945][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.121447][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 435.127068][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 435.132261][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 435.137890][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 435.143150][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 435.147889][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 435.152627][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 435.157800][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.162459][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.168503][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 435.174717][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.180844][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.186040][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.190879][T14368] do_SYSENTER_32+0x73/0x90 [ 435.195357][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.201653][T14368] RIP: 0023:0xf7f77549 [ 435.205710][T14368] Code: Bad RIP value. [ 435.209747][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 435.218137][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 435.226094][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 435.234051][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.242001][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 435.249946][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.257902][T14368] Uninit was stored to memory at: [ 435.262905][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 435.268598][T14368] __msan_chain_origin+0x50/0x90 [ 435.273513][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.278600][T14368] get_compat_msghdr+0x108/0x270 [ 435.283513][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.288054][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.292702][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.298775][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.304938][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.310107][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.314930][T14368] do_SYSENTER_32+0x73/0x90 [ 435.319403][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.325694][T14368] [ 435.327994][T14368] Uninit was stored to memory at: [ 435.332996][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 435.338694][T14368] __msan_chain_origin+0x50/0x90 [ 435.343605][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.348690][T14368] get_compat_msghdr+0x108/0x270 [ 435.353601][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.358076][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.362723][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.368764][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.374893][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.380076][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.384905][T14368] do_SYSENTER_32+0x73/0x90 [ 435.389385][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.395679][T14368] [ 435.397982][T14368] Uninit was stored to memory at: [ 435.402983][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 435.408689][T14368] __msan_chain_origin+0x50/0x90 [ 435.413708][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.418807][T14368] get_compat_msghdr+0x108/0x270 [ 435.423732][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.428219][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.432873][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.438917][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.445054][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.450238][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.455063][T14368] do_SYSENTER_32+0x73/0x90 [ 435.459538][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.465831][T14368] [ 435.468131][T14368] Uninit was stored to memory at: [ 435.473128][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 435.478818][T14368] __msan_chain_origin+0x50/0x90 [ 435.483730][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.488815][T14368] get_compat_msghdr+0x108/0x270 [ 435.493724][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.498200][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.502857][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.508896][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.515021][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.520202][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.525027][T14368] do_SYSENTER_32+0x73/0x90 [ 435.529500][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.535791][T14368] [ 435.538091][T14368] Uninit was stored to memory at: [ 435.543129][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 435.548823][T14368] __msan_chain_origin+0x50/0x90 [ 435.553733][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.558819][T14368] get_compat_msghdr+0x108/0x270 [ 435.563728][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.568221][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.572873][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.578907][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.585030][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.590202][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.595024][T14368] do_SYSENTER_32+0x73/0x90 [ 435.599497][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.605788][T14368] [ 435.608089][T14368] Uninit was stored to memory at: [ 435.613096][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 435.618786][T14368] __msan_chain_origin+0x50/0x90 [ 435.623716][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.628815][T14368] get_compat_msghdr+0x108/0x270 [ 435.633724][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.638200][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.642847][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.648922][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.655048][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.660220][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.665064][T14368] do_SYSENTER_32+0x73/0x90 [ 435.669552][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.675843][T14368] [ 435.678140][T14368] Uninit was stored to memory at: [ 435.683136][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 435.688845][T14368] __msan_chain_origin+0x50/0x90 [ 435.693756][T14368] __get_compat_msghdr+0x5be/0x890 [ 435.698840][T14368] get_compat_msghdr+0x108/0x270 [ 435.703752][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 435.708229][T14368] __sys_recvmmsg+0x4ca/0x510 [ 435.712879][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 435.718963][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 435.725090][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 435.730261][T14368] do_fast_syscall_32+0x6b/0xd0 [ 435.735084][T14368] do_SYSENTER_32+0x73/0x90 [ 435.739570][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 435.745863][T14368] [ 435.748162][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 435.754807][T14368] do_recvmmsg+0xc5/0x1ee0 [ 435.759195][T14368] do_recvmmsg+0xc5/0x1ee0 [ 435.947134][T14368] not chained 350000 origins [ 435.951777][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 435.960441][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.970493][T14368] Call Trace: [ 435.973789][T14368] dump_stack+0x1df/0x240 [ 435.978129][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 435.983846][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 435.989654][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 435.995736][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 436.000516][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 436.005629][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 436.011179][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 436.017260][T14368] ? _copy_from_user+0x15b/0x260 [ 436.022207][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 436.027321][T14368] __msan_chain_origin+0x50/0x90 [ 436.032263][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.037392][T14368] get_compat_msghdr+0x108/0x270 [ 436.042332][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.046820][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 436.052435][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 436.057606][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 436.063217][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 436.068482][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 436.073220][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 436.078001][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 436.083182][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.087840][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.093882][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 436.100097][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.106226][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.111457][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.116297][T14368] do_SYSENTER_32+0x73/0x90 [ 436.120786][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.127088][T14368] RIP: 0023:0xf7f77549 [ 436.131124][T14368] Code: Bad RIP value. [ 436.135199][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 436.143594][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 436.151539][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 436.159483][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.167428][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 436.175375][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.183326][T14368] Uninit was stored to memory at: [ 436.188330][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 436.194029][T14368] __msan_chain_origin+0x50/0x90 [ 436.198952][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.204044][T14368] get_compat_msghdr+0x108/0x270 [ 436.208965][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.213440][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.218093][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.224140][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.230294][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.235476][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.240302][T14368] do_SYSENTER_32+0x73/0x90 [ 436.244784][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.251079][T14368] [ 436.253381][T14368] Uninit was stored to memory at: [ 436.258474][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 436.264176][T14368] __msan_chain_origin+0x50/0x90 [ 436.269100][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.274186][T14368] get_compat_msghdr+0x108/0x270 [ 436.279096][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.283570][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.288222][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.294280][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.300407][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.305578][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.310409][T14368] do_SYSENTER_32+0x73/0x90 [ 436.314893][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.321190][T14368] [ 436.323492][T14368] Uninit was stored to memory at: [ 436.328497][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 436.334200][T14368] __msan_chain_origin+0x50/0x90 [ 436.339128][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.344226][T14368] get_compat_msghdr+0x108/0x270 [ 436.349164][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.353639][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.358289][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.364329][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.370642][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.375829][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.380666][T14368] do_SYSENTER_32+0x73/0x90 [ 436.385150][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.391443][T14368] [ 436.393742][T14368] Uninit was stored to memory at: [ 436.398742][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 436.404436][T14368] __msan_chain_origin+0x50/0x90 [ 436.409356][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.414438][T14368] get_compat_msghdr+0x108/0x270 [ 436.419348][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.423821][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.428476][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.434518][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.440661][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.445842][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.450676][T14368] do_SYSENTER_32+0x73/0x90 [ 436.455153][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.461585][T14368] [ 436.463888][T14368] Uninit was stored to memory at: [ 436.468885][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 436.474578][T14368] __msan_chain_origin+0x50/0x90 [ 436.479487][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.484578][T14368] get_compat_msghdr+0x108/0x270 [ 436.489497][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.493974][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.498631][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.504670][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.510796][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.516091][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.520913][T14368] do_SYSENTER_32+0x73/0x90 [ 436.525391][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.531684][T14368] [ 436.533984][T14368] Uninit was stored to memory at: [ 436.539001][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 436.544694][T14368] __msan_chain_origin+0x50/0x90 [ 436.549605][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.554699][T14368] get_compat_msghdr+0x108/0x270 [ 436.559621][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.564107][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.568768][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.574806][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.580933][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.586101][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.590921][T14368] do_SYSENTER_32+0x73/0x90 [ 436.595483][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.601776][T14368] [ 436.604080][T14368] Uninit was stored to memory at: [ 436.609092][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 436.614785][T14368] __msan_chain_origin+0x50/0x90 [ 436.619696][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.624786][T14368] get_compat_msghdr+0x108/0x270 [ 436.629701][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.634176][T14368] __sys_recvmmsg+0x4ca/0x510 [ 436.638824][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 436.644863][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 436.651046][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 436.656218][T14368] do_fast_syscall_32+0x6b/0xd0 [ 436.661047][T14368] do_SYSENTER_32+0x73/0x90 [ 436.665539][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 436.671856][T14368] [ 436.674156][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 436.680807][T14368] do_recvmmsg+0xc5/0x1ee0 [ 436.685195][T14368] do_recvmmsg+0xc5/0x1ee0 [ 436.879575][T14368] not chained 360000 origins [ 436.884198][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 436.892862][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.902922][T14368] Call Trace: [ 436.906214][T14368] dump_stack+0x1df/0x240 [ 436.910547][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 436.916467][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 436.922286][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 436.928356][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 436.933145][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 436.938256][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 436.943805][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 436.949867][T14368] ? _copy_from_user+0x15b/0x260 [ 436.954782][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 436.959866][T14368] __msan_chain_origin+0x50/0x90 [ 436.964784][T14368] __get_compat_msghdr+0x5be/0x890 [ 436.969880][T14368] get_compat_msghdr+0x108/0x270 [ 436.974798][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 436.979290][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 436.984994][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 436.990116][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 436.995739][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 437.001012][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 437.005752][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 437.010488][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 437.015660][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.020320][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.026362][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 437.032583][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.038712][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.043889][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.048716][T14368] do_SYSENTER_32+0x73/0x90 [ 437.053224][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.059524][T14368] RIP: 0023:0xf7f77549 [ 437.063558][T14368] Code: Bad RIP value. [ 437.067597][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 437.075979][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 437.083925][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 437.091900][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.099842][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 437.107796][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.115761][T14368] Uninit was stored to memory at: [ 437.120794][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 437.126491][T14368] __msan_chain_origin+0x50/0x90 [ 437.131402][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.136484][T14368] get_compat_msghdr+0x108/0x270 [ 437.141392][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.145868][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.150516][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.156553][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.162680][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.167892][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.172807][T14368] do_SYSENTER_32+0x73/0x90 [ 437.177296][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.183590][T14368] [ 437.185898][T14368] Uninit was stored to memory at: [ 437.190911][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 437.196609][T14368] __msan_chain_origin+0x50/0x90 [ 437.201534][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.206792][T14368] get_compat_msghdr+0x108/0x270 [ 437.211705][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.216195][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.220856][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.226893][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.233036][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.238206][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.243027][T14368] do_SYSENTER_32+0x73/0x90 [ 437.247504][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.253799][T14368] [ 437.256099][T14368] Uninit was stored to memory at: [ 437.261098][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 437.266789][T14368] __msan_chain_origin+0x50/0x90 [ 437.271699][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.276784][T14368] get_compat_msghdr+0x108/0x270 [ 437.281695][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.286171][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.290818][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.296893][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.303050][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.308224][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.313111][T14368] do_SYSENTER_32+0x73/0x90 [ 437.317617][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.323920][T14368] [ 437.326245][T14368] Uninit was stored to memory at: [ 437.331273][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 437.336971][T14368] __msan_chain_origin+0x50/0x90 [ 437.341889][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.346978][T14368] get_compat_msghdr+0x108/0x270 [ 437.351890][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.356367][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.361016][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.367056][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.373234][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.378408][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.383240][T14368] do_SYSENTER_32+0x73/0x90 [ 437.387836][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.394216][T14368] [ 437.396518][T14368] Uninit was stored to memory at: [ 437.401514][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 437.407213][T14368] __msan_chain_origin+0x50/0x90 [ 437.412126][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.417261][T14368] get_compat_msghdr+0x108/0x270 [ 437.422174][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.426663][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.431320][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.437380][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.443522][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.448747][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.453570][T14368] do_SYSENTER_32+0x73/0x90 [ 437.458046][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.464342][T14368] [ 437.466642][T14368] Uninit was stored to memory at: [ 437.471639][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 437.477331][T14368] __msan_chain_origin+0x50/0x90 [ 437.482243][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.487325][T14368] get_compat_msghdr+0x108/0x270 [ 437.492234][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.496709][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.501367][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.507409][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.513589][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.518759][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.523595][T14368] do_SYSENTER_32+0x73/0x90 [ 437.528071][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.534372][T14368] [ 437.536672][T14368] Uninit was stored to memory at: [ 437.541755][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 437.547463][T14368] __msan_chain_origin+0x50/0x90 [ 437.552395][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.557479][T14368] get_compat_msghdr+0x108/0x270 [ 437.562403][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.566881][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.571529][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.577567][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.583693][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.588865][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.593688][T14368] do_SYSENTER_32+0x73/0x90 [ 437.598164][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.604460][T14368] [ 437.606763][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 437.613452][T14368] do_recvmmsg+0xc5/0x1ee0 [ 437.617839][T14368] do_recvmmsg+0xc5/0x1ee0 [ 437.790172][T14368] not chained 370000 origins [ 437.794799][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.803461][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.813514][T14368] Call Trace: [ 437.816813][T14368] dump_stack+0x1df/0x240 [ 437.821152][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 437.826874][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 437.832682][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 437.838748][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 437.843531][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 437.848676][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 437.854225][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 437.860293][T14368] ? _copy_from_user+0x15b/0x260 [ 437.865231][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 437.870340][T14368] __msan_chain_origin+0x50/0x90 [ 437.875283][T14368] __get_compat_msghdr+0x5be/0x890 [ 437.880413][T14368] get_compat_msghdr+0x108/0x270 [ 437.885370][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 437.889884][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 437.895532][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 437.900643][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 437.906281][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 437.911568][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 437.916343][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 437.921104][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 437.926305][T14368] __sys_recvmmsg+0x4ca/0x510 [ 437.930991][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 437.937059][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 437.943297][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 437.949456][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 437.954665][T14368] do_fast_syscall_32+0x6b/0xd0 [ 437.959521][T14368] do_SYSENTER_32+0x73/0x90 [ 437.964024][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.970344][T14368] RIP: 0023:0xf7f77549 [ 437.974401][T14368] Code: Bad RIP value. [ 437.978471][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 437.986965][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 437.995063][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 438.003032][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.011002][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 438.018968][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.026945][T14368] Uninit was stored to memory at: [ 438.031978][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 438.037702][T14368] __msan_chain_origin+0x50/0x90 [ 438.042644][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.047761][T14368] get_compat_msghdr+0x108/0x270 [ 438.052723][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.057240][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.061937][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.068007][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.074165][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 438.079368][T14368] do_fast_syscall_32+0x6b/0xd0 [ 438.084223][T14368] do_SYSENTER_32+0x73/0x90 [ 438.088727][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.095040][T14368] [ 438.097362][T14368] Uninit was stored to memory at: [ 438.102388][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 438.108111][T14368] __msan_chain_origin+0x50/0x90 [ 438.113057][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.118169][T14368] get_compat_msghdr+0x108/0x270 [ 438.123110][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.127615][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.132295][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.138362][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.144517][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 438.149717][T14368] do_fast_syscall_32+0x6b/0xd0 [ 438.154568][T14368] do_SYSENTER_32+0x73/0x90 [ 438.159067][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.165378][T14368] [ 438.167695][T14368] Uninit was stored to memory at: [ 438.172741][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 438.178463][T14368] __msan_chain_origin+0x50/0x90 [ 438.183400][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.188516][T14368] get_compat_msghdr+0x108/0x270 [ 438.193455][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.197957][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.202634][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.208697][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.214850][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 438.220048][T14368] do_fast_syscall_32+0x6b/0xd0 [ 438.224895][T14368] do_SYSENTER_32+0x73/0x90 [ 438.229397][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.235707][T14368] [ 438.238024][T14368] Uninit was stored to memory at: [ 438.243056][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 438.248769][T14368] __msan_chain_origin+0x50/0x90 [ 438.253706][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.258806][T14368] get_compat_msghdr+0x108/0x270 [ 438.263716][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.268194][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.272845][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.278885][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.285025][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 438.290211][T14368] do_fast_syscall_32+0x6b/0xd0 [ 438.295034][T14368] do_SYSENTER_32+0x73/0x90 [ 438.299506][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.305802][T14368] [ 438.308113][T14368] Uninit was stored to memory at: [ 438.313162][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 438.318856][T14368] __msan_chain_origin+0x50/0x90 [ 438.323765][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.328851][T14368] get_compat_msghdr+0x108/0x270 [ 438.333760][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.338237][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.342884][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.348923][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.355050][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 438.360240][T14368] do_fast_syscall_32+0x6b/0xd0 [ 438.365075][T14368] do_SYSENTER_32+0x73/0x90 [ 438.369563][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.375856][T14368] [ 438.378164][T14368] Uninit was stored to memory at: [ 438.383175][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 438.388874][T14368] __msan_chain_origin+0x50/0x90 [ 438.393790][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.398874][T14368] get_compat_msghdr+0x108/0x270 [ 438.403783][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.408278][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.412926][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.418972][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.425110][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 438.430301][T14368] do_fast_syscall_32+0x6b/0xd0 [ 438.435133][T14368] do_SYSENTER_32+0x73/0x90 [ 438.439628][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.445924][T14368] [ 438.448235][T14368] Uninit was stored to memory at: [ 438.453234][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 438.458930][T14368] __msan_chain_origin+0x50/0x90 [ 438.463937][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.469034][T14368] get_compat_msghdr+0x108/0x270 [ 438.473957][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.478463][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.483111][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.489153][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.495278][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 438.500453][T14368] do_fast_syscall_32+0x6b/0xd0 [ 438.505289][T14368] do_SYSENTER_32+0x73/0x90 [ 438.509875][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.516166][T14368] [ 438.518473][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 438.525255][T14368] do_recvmmsg+0xc5/0x1ee0 [ 438.529654][T14368] do_recvmmsg+0xc5/0x1ee0 [ 438.839012][T14368] not chained 380000 origins [ 438.843609][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 438.852252][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.862280][T14368] Call Trace: [ 438.865549][T14368] dump_stack+0x1df/0x240 [ 438.869856][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 438.875564][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 438.881358][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 438.887400][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 438.892155][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 438.897261][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 438.902780][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 438.908863][T14368] ? _copy_from_user+0x15b/0x260 [ 438.913774][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 438.918861][T14368] __msan_chain_origin+0x50/0x90 [ 438.923783][T14368] __get_compat_msghdr+0x5be/0x890 [ 438.928879][T14368] get_compat_msghdr+0x108/0x270 [ 438.933797][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 438.938315][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 438.943987][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 438.949103][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 438.954870][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 438.960163][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 438.964932][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 438.969701][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 438.974909][T14368] __sys_recvmmsg+0x4ca/0x510 [ 438.979601][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 438.985675][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 438.991914][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 438.998085][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.003428][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.008290][T14368] do_SYSENTER_32+0x73/0x90 [ 439.012795][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.019117][T14368] RIP: 0023:0xf7f77549 [ 439.023175][T14368] Code: Bad RIP value. [ 439.027252][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 439.035662][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 439.043631][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 439.051601][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.059567][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 439.067532][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.075525][T14368] Uninit was stored to memory at: [ 439.080551][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 439.086268][T14368] __msan_chain_origin+0x50/0x90 [ 439.091290][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.096404][T14368] get_compat_msghdr+0x108/0x270 [ 439.101337][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.105837][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.110516][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.116582][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.122735][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.127943][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.132794][T14368] do_SYSENTER_32+0x73/0x90 [ 439.137302][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.143629][T14368] [ 439.145947][T14368] Uninit was stored to memory at: [ 439.150977][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 439.156694][T14368] __msan_chain_origin+0x50/0x90 [ 439.161634][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.166748][T14368] get_compat_msghdr+0x108/0x270 [ 439.171686][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.176194][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.180871][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.186931][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.193079][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.198277][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.203127][T14368] do_SYSENTER_32+0x73/0x90 [ 439.207627][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.213941][T14368] [ 439.216268][T14368] Uninit was stored to memory at: [ 439.221281][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 439.226971][T14368] __msan_chain_origin+0x50/0x90 [ 439.231880][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.236962][T14368] get_compat_msghdr+0x108/0x270 [ 439.241872][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.246348][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.250998][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.257035][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.263159][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.268337][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.273159][T14368] do_SYSENTER_32+0x73/0x90 [ 439.277634][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.283929][T14368] [ 439.286243][T14368] Uninit was stored to memory at: [ 439.291242][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 439.296932][T14368] __msan_chain_origin+0x50/0x90 [ 439.301842][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.306958][T14368] get_compat_msghdr+0x108/0x270 [ 439.311870][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.316349][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.320995][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.327043][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.333201][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.338373][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.343207][T14368] do_SYSENTER_32+0x73/0x90 [ 439.347682][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.353975][T14368] [ 439.356273][T14368] Uninit was stored to memory at: [ 439.361269][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 439.366959][T14368] __msan_chain_origin+0x50/0x90 [ 439.371883][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.376979][T14368] get_compat_msghdr+0x108/0x270 [ 439.381896][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.386376][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.391029][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.397072][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.403300][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.408478][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.413303][T14368] do_SYSENTER_32+0x73/0x90 [ 439.417781][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.424075][T14368] [ 439.426379][T14368] Uninit was stored to memory at: [ 439.431380][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 439.437083][T14368] __msan_chain_origin+0x50/0x90 [ 439.442021][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.447115][T14368] get_compat_msghdr+0x108/0x270 [ 439.452027][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.456504][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.461157][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.467208][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.473366][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.478538][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.483366][T14368] do_SYSENTER_32+0x73/0x90 [ 439.487844][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.494140][T14368] [ 439.496441][T14368] Uninit was stored to memory at: [ 439.501439][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 439.507133][T14368] __msan_chain_origin+0x50/0x90 [ 439.512044][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.517136][T14368] get_compat_msghdr+0x108/0x270 [ 439.522158][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.526637][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.531290][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.537330][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.543488][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.548663][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.553488][T14368] do_SYSENTER_32+0x73/0x90 [ 439.557966][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.564259][T14368] [ 439.566563][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 439.573249][T14368] do_recvmmsg+0xc5/0x1ee0 [ 439.577637][T14368] do_recvmmsg+0xc5/0x1ee0 [ 439.760218][T14368] not chained 390000 origins [ 439.764933][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 439.773598][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.783646][T14368] Call Trace: [ 439.786925][T14368] dump_stack+0x1df/0x240 [ 439.791239][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 439.796935][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 439.802720][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 439.808763][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 439.813514][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 439.818603][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 439.824137][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 439.830205][T14368] ? _copy_from_user+0x15b/0x260 [ 439.835119][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 439.840206][T14368] __msan_chain_origin+0x50/0x90 [ 439.845137][T14368] __get_compat_msghdr+0x5be/0x890 [ 439.850243][T14368] get_compat_msghdr+0x108/0x270 [ 439.855166][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 439.859651][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 439.865287][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 439.870382][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 439.876005][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 439.881279][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 439.886035][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 439.890786][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 439.895961][T14368] __sys_recvmmsg+0x4ca/0x510 [ 439.900621][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 439.906666][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 439.912881][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 439.919014][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 439.924211][T14368] do_fast_syscall_32+0x6b/0xd0 [ 439.929051][T14368] do_SYSENTER_32+0x73/0x90 [ 439.933528][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 439.939827][T14368] RIP: 0023:0xf7f77549 [ 439.943871][T14368] Code: Bad RIP value. [ 439.947923][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 439.956307][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 439.964261][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 439.972217][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.980163][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 439.988119][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.996136][T14368] Uninit was stored to memory at: [ 440.001139][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.006837][T14368] __msan_chain_origin+0x50/0x90 [ 440.011752][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.016841][T14368] get_compat_msghdr+0x108/0x270 [ 440.021757][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.026254][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.030930][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.036972][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.043148][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.048320][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.053146][T14368] do_SYSENTER_32+0x73/0x90 [ 440.057624][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.063948][T14368] [ 440.066275][T14368] Uninit was stored to memory at: [ 440.071293][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.076996][T14368] __msan_chain_origin+0x50/0x90 [ 440.081912][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.087002][T14368] get_compat_msghdr+0x108/0x270 [ 440.091913][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.096401][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.101067][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.107137][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.113266][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.118439][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.123263][T14368] do_SYSENTER_32+0x73/0x90 [ 440.127740][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.134100][T14368] [ 440.136404][T14368] Uninit was stored to memory at: [ 440.141402][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.147096][T14368] __msan_chain_origin+0x50/0x90 [ 440.152007][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.157091][T14368] get_compat_msghdr+0x108/0x270 [ 440.162015][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.166613][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.171271][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.177318][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.183478][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.188662][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.193488][T14368] do_SYSENTER_32+0x73/0x90 [ 440.197967][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.204267][T14368] [ 440.206692][T14368] Uninit was stored to memory at: [ 440.211711][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.217409][T14368] __msan_chain_origin+0x50/0x90 [ 440.222325][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.227418][T14368] get_compat_msghdr+0x108/0x270 [ 440.232332][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.236810][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.241462][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.247558][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.253686][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.258864][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.263689][T14368] do_SYSENTER_32+0x73/0x90 [ 440.268179][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.274476][T14368] [ 440.276778][T14368] Uninit was stored to memory at: [ 440.281777][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.287471][T14368] __msan_chain_origin+0x50/0x90 [ 440.292385][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.297470][T14368] get_compat_msghdr+0x108/0x270 [ 440.302381][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.306918][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.311570][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.317609][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.323747][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.328930][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.333774][T14368] do_SYSENTER_32+0x73/0x90 [ 440.338262][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.344577][T14368] [ 440.346886][T14368] Uninit was stored to memory at: [ 440.351884][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.357709][T14368] __msan_chain_origin+0x50/0x90 [ 440.362622][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.367711][T14368] get_compat_msghdr+0x108/0x270 [ 440.372633][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.377121][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.381779][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.387828][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.393984][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.399161][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.403998][T14368] do_SYSENTER_32+0x73/0x90 [ 440.408492][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.414786][T14368] [ 440.417089][T14368] Uninit was stored to memory at: [ 440.422088][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.427791][T14368] __msan_chain_origin+0x50/0x90 [ 440.432748][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.437845][T14368] get_compat_msghdr+0x108/0x270 [ 440.442758][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.447317][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.451969][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.458016][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.464164][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.469349][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.474176][T14368] do_SYSENTER_32+0x73/0x90 [ 440.478654][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.484951][T14368] [ 440.487267][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 440.493926][T14368] do_recvmmsg+0xc5/0x1ee0 [ 440.498319][T14368] do_recvmmsg+0xc5/0x1ee0 [ 440.642357][T14368] not chained 400000 origins [ 440.646979][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 440.655642][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.665695][T14368] Call Trace: [ 440.668985][T14368] dump_stack+0x1df/0x240 [ 440.673326][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 440.679223][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 440.685035][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 440.691106][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 440.695890][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 440.701006][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 440.706561][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 440.712634][T14368] ? _copy_from_user+0x15b/0x260 [ 440.717589][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 440.722699][T14368] __msan_chain_origin+0x50/0x90 [ 440.727645][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.732779][T14368] get_compat_msghdr+0x108/0x270 [ 440.737829][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.742345][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 440.748103][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 440.753218][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 440.758861][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 440.764206][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 440.769009][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 440.773861][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 440.779067][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.783755][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.789832][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 440.796078][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.802236][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.807445][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.812309][T14368] do_SYSENTER_32+0x73/0x90 [ 440.816820][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.823147][T14368] RIP: 0023:0xf7f77549 [ 440.827206][T14368] Code: Bad RIP value. [ 440.831266][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 440.839674][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 440.847647][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 440.855616][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.863648][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 440.871692][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.879646][T14368] Uninit was stored to memory at: [ 440.884650][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.890344][T14368] __msan_chain_origin+0x50/0x90 [ 440.895271][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.900372][T14368] get_compat_msghdr+0x108/0x270 [ 440.905286][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.909762][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.914424][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.920478][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.926609][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 440.931782][T14368] do_fast_syscall_32+0x6b/0xd0 [ 440.936608][T14368] do_SYSENTER_32+0x73/0x90 [ 440.941084][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 440.947380][T14368] [ 440.949680][T14368] Uninit was stored to memory at: [ 440.954692][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 440.960397][T14368] __msan_chain_origin+0x50/0x90 [ 440.965313][T14368] __get_compat_msghdr+0x5be/0x890 [ 440.970397][T14368] get_compat_msghdr+0x108/0x270 [ 440.975318][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 440.979816][T14368] __sys_recvmmsg+0x4ca/0x510 [ 440.984477][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 440.990518][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 440.996649][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.001821][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.006662][T14368] do_SYSENTER_32+0x73/0x90 [ 441.011137][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.017443][T14368] [ 441.019756][T14368] Uninit was stored to memory at: [ 441.024758][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.030453][T14368] __msan_chain_origin+0x50/0x90 [ 441.035468][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.040565][T14368] get_compat_msghdr+0x108/0x270 [ 441.045481][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.049956][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.054616][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.060669][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.066823][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.071995][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.076820][T14368] do_SYSENTER_32+0x73/0x90 [ 441.081296][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.087591][T14368] [ 441.089893][T14368] Uninit was stored to memory at: [ 441.094904][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.100610][T14368] __msan_chain_origin+0x50/0x90 [ 441.105540][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.110637][T14368] get_compat_msghdr+0x108/0x270 [ 441.115562][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.120051][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.124711][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.130784][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.136915][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.142089][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.146914][T14368] do_SYSENTER_32+0x73/0x90 [ 441.151388][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.157804][T14368] [ 441.160117][T14368] Uninit was stored to memory at: [ 441.165118][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.170811][T14368] __msan_chain_origin+0x50/0x90 [ 441.175735][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.180834][T14368] get_compat_msghdr+0x108/0x270 [ 441.185749][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.190235][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.194898][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.200947][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.207085][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.212263][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.217092][T14368] do_SYSENTER_32+0x73/0x90 [ 441.221569][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.227862][T14368] [ 441.230163][T14368] Uninit was stored to memory at: [ 441.235175][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.240883][T14368] __msan_chain_origin+0x50/0x90 [ 441.245794][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.250877][T14368] get_compat_msghdr+0x108/0x270 [ 441.255799][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.260288][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.264937][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.270976][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.277104][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.282365][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.287200][T14368] do_SYSENTER_32+0x73/0x90 [ 441.291739][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.298032][T14368] [ 441.300336][T14368] Uninit was stored to memory at: [ 441.305352][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.311107][T14368] __msan_chain_origin+0x50/0x90 [ 441.316032][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.321128][T14368] get_compat_msghdr+0x108/0x270 [ 441.326194][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.330716][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.335381][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.341434][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.347564][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.352737][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.357567][T14368] do_SYSENTER_32+0x73/0x90 [ 441.362043][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.368340][T14368] [ 441.370740][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 441.377398][T14368] do_recvmmsg+0xc5/0x1ee0 [ 441.381790][T14368] do_recvmmsg+0xc5/0x1ee0 [ 441.525272][T14368] not chained 410000 origins [ 441.529892][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 441.538555][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.548611][T14368] Call Trace: [ 441.551909][T14368] dump_stack+0x1df/0x240 [ 441.556260][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 441.561978][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 441.567790][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 441.573861][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 441.578640][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 441.583751][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 441.589300][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 441.595370][T14368] ? _copy_from_user+0x15b/0x260 [ 441.600319][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 441.605433][T14368] __msan_chain_origin+0x50/0x90 [ 441.610380][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.615515][T14368] get_compat_msghdr+0x108/0x270 [ 441.620480][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.625862][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 441.631508][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 441.636617][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 441.642264][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 441.647557][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 441.652334][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 441.657208][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 441.662423][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.667114][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.673187][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 441.679431][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.685593][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.690859][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.695690][T14368] do_SYSENTER_32+0x73/0x90 [ 441.700169][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.706476][T14368] RIP: 0023:0xf7f77549 [ 441.710515][T14368] Code: Bad RIP value. [ 441.714556][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 441.722941][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 441.730890][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 441.738840][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.746793][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 441.754750][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.762705][T14368] Uninit was stored to memory at: [ 441.767721][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.773414][T14368] __msan_chain_origin+0x50/0x90 [ 441.778327][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.783414][T14368] get_compat_msghdr+0x108/0x270 [ 441.788329][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.792807][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.797461][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.803500][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.809648][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.814826][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.819652][T14368] do_SYSENTER_32+0x73/0x90 [ 441.824141][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.830446][T14368] [ 441.832747][T14368] Uninit was stored to memory at: [ 441.837747][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.843512][T14368] __msan_chain_origin+0x50/0x90 [ 441.848429][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.853520][T14368] get_compat_msghdr+0x108/0x270 [ 441.858433][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.862912][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.867561][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.873630][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.879765][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.884952][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.889786][T14368] do_SYSENTER_32+0x73/0x90 [ 441.894265][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.900560][T14368] [ 441.902859][T14368] Uninit was stored to memory at: [ 441.907862][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.913553][T14368] __msan_chain_origin+0x50/0x90 [ 441.918487][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.923582][T14368] get_compat_msghdr+0x108/0x270 [ 441.928506][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 441.932983][T14368] __sys_recvmmsg+0x4ca/0x510 [ 441.937634][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 441.943712][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 441.949849][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 441.955117][T14368] do_fast_syscall_32+0x6b/0xd0 [ 441.959937][T14368] do_SYSENTER_32+0x73/0x90 [ 441.964426][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 441.970739][T14368] [ 441.973038][T14368] Uninit was stored to memory at: [ 441.978036][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 441.983736][T14368] __msan_chain_origin+0x50/0x90 [ 441.988661][T14368] __get_compat_msghdr+0x5be/0x890 [ 441.993759][T14368] get_compat_msghdr+0x108/0x270 [ 441.998671][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.003147][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.007801][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.013842][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.019968][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.025153][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.030132][T14368] do_SYSENTER_32+0x73/0x90 [ 442.034611][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.040904][T14368] [ 442.043214][T14368] Uninit was stored to memory at: [ 442.048219][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.053924][T14368] __msan_chain_origin+0x50/0x90 [ 442.058847][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.063942][T14368] get_compat_msghdr+0x108/0x270 [ 442.068923][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.073435][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.078093][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.084142][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.090284][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.095461][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.100398][T14368] do_SYSENTER_32+0x73/0x90 [ 442.104886][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.111192][T14368] [ 442.113492][T14368] Uninit was stored to memory at: [ 442.118493][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.124198][T14368] __msan_chain_origin+0x50/0x90 [ 442.129123][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.134209][T14368] get_compat_msghdr+0x108/0x270 [ 442.139157][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.143648][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.148312][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.154352][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.160481][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.165664][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.170512][T14368] do_SYSENTER_32+0x73/0x90 [ 442.174990][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.181283][T14368] [ 442.183591][T14368] Uninit was stored to memory at: [ 442.188632][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.194338][T14368] __msan_chain_origin+0x50/0x90 [ 442.199260][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.204367][T14368] get_compat_msghdr+0x108/0x270 [ 442.209295][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.213778][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.218430][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.224490][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.230634][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.235810][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.240634][T14368] do_SYSENTER_32+0x73/0x90 [ 442.245123][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.251431][T14368] [ 442.253736][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 442.260386][T14368] do_recvmmsg+0xc5/0x1ee0 [ 442.264792][T14368] do_recvmmsg+0xc5/0x1ee0 [ 442.410088][T14368] not chained 420000 origins [ 442.414717][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 442.423378][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.433529][T14368] Call Trace: [ 442.436838][T14368] dump_stack+0x1df/0x240 [ 442.441181][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 442.446906][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 442.452721][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 442.458798][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 442.463580][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 442.468702][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 442.474253][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 442.480331][T14368] ? _copy_from_user+0x15b/0x260 [ 442.485278][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 442.490395][T14368] __msan_chain_origin+0x50/0x90 [ 442.495343][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.500480][T14368] get_compat_msghdr+0x108/0x270 [ 442.505431][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.510047][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 442.515700][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 442.520815][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 442.526457][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 442.531858][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 442.540974][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 442.545742][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 442.550954][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.555642][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.561713][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 442.567961][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.574121][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.579315][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.584161][T14368] do_SYSENTER_32+0x73/0x90 [ 442.588655][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.594955][T14368] RIP: 0023:0xf7f77549 [ 442.599081][T14368] Code: Bad RIP value. [ 442.603118][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 442.611503][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 442.619460][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 442.627412][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.635372][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 442.643319][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.651283][T14368] Uninit was stored to memory at: [ 442.656303][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.661996][T14368] __msan_chain_origin+0x50/0x90 [ 442.666911][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.671999][T14368] get_compat_msghdr+0x108/0x270 [ 442.676913][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.681392][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.686057][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.692108][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.698245][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.703418][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.708243][T14368] do_SYSENTER_32+0x73/0x90 [ 442.712720][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.719015][T14368] [ 442.721316][T14368] Uninit was stored to memory at: [ 442.726318][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.732011][T14368] __msan_chain_origin+0x50/0x90 [ 442.736941][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.742040][T14368] get_compat_msghdr+0x108/0x270 [ 442.746956][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.751433][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.756154][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.762200][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.768334][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.773510][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.778350][T14368] do_SYSENTER_32+0x73/0x90 [ 442.782834][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.789127][T14368] [ 442.791427][T14368] Uninit was stored to memory at: [ 442.796426][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.802115][T14368] __msan_chain_origin+0x50/0x90 [ 442.807029][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.812127][T14368] get_compat_msghdr+0x108/0x270 [ 442.817130][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.821609][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.826265][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.832307][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.838432][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.843614][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.848462][T14368] do_SYSENTER_32+0x73/0x90 [ 442.852955][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.859250][T14368] [ 442.861548][T14368] Uninit was stored to memory at: [ 442.866551][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.872387][T14368] __msan_chain_origin+0x50/0x90 [ 442.877300][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.882384][T14368] get_compat_msghdr+0x108/0x270 [ 442.887298][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.891775][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.896426][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.902483][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.908612][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.913789][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.918612][T14368] do_SYSENTER_32+0x73/0x90 [ 442.923110][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.929407][T14368] [ 442.931712][T14368] Uninit was stored to memory at: [ 442.936711][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 442.942456][T14368] __msan_chain_origin+0x50/0x90 [ 442.947403][T14368] __get_compat_msghdr+0x5be/0x890 [ 442.952507][T14368] get_compat_msghdr+0x108/0x270 [ 442.957419][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 442.961898][T14368] __sys_recvmmsg+0x4ca/0x510 [ 442.966549][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.972589][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.978715][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 442.983902][T14368] do_fast_syscall_32+0x6b/0xd0 [ 442.988738][T14368] do_SYSENTER_32+0x73/0x90 [ 442.993216][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.999511][T14368] [ 443.001810][T14368] Uninit was stored to memory at: [ 443.006811][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.012502][T14368] __msan_chain_origin+0x50/0x90 [ 443.017415][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.022504][T14368] get_compat_msghdr+0x108/0x270 [ 443.027418][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.031897][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.036548][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.042684][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.048812][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.053985][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.058808][T14368] do_SYSENTER_32+0x73/0x90 [ 443.063282][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.069581][T14368] [ 443.072417][T14368] Uninit was stored to memory at: [ 443.077425][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.083119][T14368] __msan_chain_origin+0x50/0x90 [ 443.088032][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.093216][T14368] get_compat_msghdr+0x108/0x270 [ 443.098146][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.102623][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.107277][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.114234][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.120359][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.125542][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.130380][T14368] do_SYSENTER_32+0x73/0x90 [ 443.134858][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.141194][T14368] [ 443.143501][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 443.150163][T14368] do_recvmmsg+0xc5/0x1ee0 [ 443.154557][T14368] do_recvmmsg+0xc5/0x1ee0 [ 443.300003][T14368] not chained 430000 origins [ 443.304635][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 443.313301][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.323370][T14368] Call Trace: [ 443.326674][T14368] dump_stack+0x1df/0x240 [ 443.331020][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 443.336743][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 443.343515][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 443.349600][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 443.354387][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 443.359501][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 443.365053][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 443.371323][T14368] ? _copy_from_user+0x15b/0x260 [ 443.376268][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 443.381385][T14368] __msan_chain_origin+0x50/0x90 [ 443.386331][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.391466][T14368] get_compat_msghdr+0x108/0x270 [ 443.396414][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.400927][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 443.407118][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 443.412249][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 443.417882][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 443.423170][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 443.427950][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 443.432835][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 443.438046][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.442781][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.448860][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 443.455107][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.461354][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.466566][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.471410][T14368] do_SYSENTER_32+0x73/0x90 [ 443.475980][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.482282][T14368] RIP: 0023:0xf7f77549 [ 443.486326][T14368] Code: Bad RIP value. [ 443.490370][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 443.498756][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 443.506715][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 443.514677][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.522627][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 443.530594][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.538564][T14368] Uninit was stored to memory at: [ 443.543584][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.549292][T14368] __msan_chain_origin+0x50/0x90 [ 443.554219][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.559317][T14368] get_compat_msghdr+0x108/0x270 [ 443.564236][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.568713][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.573360][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.579402][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.585530][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.590703][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.595538][T14368] do_SYSENTER_32+0x73/0x90 [ 443.600030][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.606324][T14368] [ 443.608627][T14368] Uninit was stored to memory at: [ 443.613636][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.619349][T14368] __msan_chain_origin+0x50/0x90 [ 443.624295][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.629535][T14368] get_compat_msghdr+0x108/0x270 [ 443.634459][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.638952][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.643615][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.649665][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.655794][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.660966][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.665793][T14368] do_SYSENTER_32+0x73/0x90 [ 443.670274][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.676569][T14368] [ 443.678872][T14368] Uninit was stored to memory at: [ 443.683880][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.689598][T14368] __msan_chain_origin+0x50/0x90 [ 443.694536][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.699647][T14368] get_compat_msghdr+0x108/0x270 [ 443.704562][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.709039][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.713698][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.719752][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.725890][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.731076][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.735904][T14368] do_SYSENTER_32+0x73/0x90 [ 443.740382][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.746675][T14368] [ 443.748980][T14368] Uninit was stored to memory at: [ 443.753993][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.759744][T14368] __msan_chain_origin+0x50/0x90 [ 443.764661][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.769744][T14368] get_compat_msghdr+0x108/0x270 [ 443.774671][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.779161][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.783834][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.789890][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.796019][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.801191][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.806168][T14368] do_SYSENTER_32+0x73/0x90 [ 443.810643][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.816937][T14368] [ 443.819241][T14368] Uninit was stored to memory at: [ 443.824246][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.829938][T14368] __msan_chain_origin+0x50/0x90 [ 443.834861][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.839978][T14368] get_compat_msghdr+0x108/0x270 [ 443.844960][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.849444][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.854106][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.860159][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.866345][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.871532][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.876357][T14368] do_SYSENTER_32+0x73/0x90 [ 443.880920][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.887215][T14368] [ 443.889521][T14368] Uninit was stored to memory at: [ 443.894535][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.900239][T14368] __msan_chain_origin+0x50/0x90 [ 443.905153][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.910238][T14368] get_compat_msghdr+0x108/0x270 [ 443.915160][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.919650][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.924304][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.930342][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.936471][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 443.941645][T14368] do_fast_syscall_32+0x6b/0xd0 [ 443.946481][T14368] do_SYSENTER_32+0x73/0x90 [ 443.950971][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.957268][T14368] [ 443.959570][T14368] Uninit was stored to memory at: [ 443.964571][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 443.970288][T14368] __msan_chain_origin+0x50/0x90 [ 443.975238][T14368] __get_compat_msghdr+0x5be/0x890 [ 443.980337][T14368] get_compat_msghdr+0x108/0x270 [ 443.985251][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 443.989728][T14368] __sys_recvmmsg+0x4ca/0x510 [ 443.994389][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.000441][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.006571][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.011747][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.016571][T14368] do_SYSENTER_32+0x73/0x90 [ 444.021047][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.027349][T14368] [ 444.029650][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 444.036300][T14368] do_recvmmsg+0xc5/0x1ee0 [ 444.040691][T14368] do_recvmmsg+0xc5/0x1ee0 [ 444.184780][T14368] not chained 440000 origins [ 444.189406][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 444.198078][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.208130][T14368] Call Trace: [ 444.211426][T14368] dump_stack+0x1df/0x240 [ 444.215767][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 444.221490][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 444.227300][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 444.233366][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 444.238173][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 444.243285][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 444.248838][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 444.254912][T14368] ? _copy_from_user+0x15b/0x260 [ 444.259849][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 444.264964][T14368] __msan_chain_origin+0x50/0x90 [ 444.269914][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.275043][T14368] get_compat_msghdr+0x108/0x270 [ 444.279997][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.284517][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 444.290166][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 444.295285][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 444.300921][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 444.306214][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 444.310995][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 444.315766][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 444.320990][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.325679][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.331752][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 444.338001][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.344148][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.349328][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.354172][T14368] do_SYSENTER_32+0x73/0x90 [ 444.358663][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.364970][T14368] RIP: 0023:0xf7f77549 [ 444.369019][T14368] Code: Bad RIP value. [ 444.373063][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 444.381456][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 444.389407][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 444.397416][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.405504][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 444.413456][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.421426][T14368] Uninit was stored to memory at: [ 444.426433][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 444.432130][T14368] __msan_chain_origin+0x50/0x90 [ 444.437053][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.442140][T14368] get_compat_msghdr+0x108/0x270 [ 444.447051][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.451528][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.456184][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.462227][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.468356][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.473538][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.478374][T14368] do_SYSENTER_32+0x73/0x90 [ 444.482850][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.489142][T14368] [ 444.491445][T14368] Uninit was stored to memory at: [ 444.496458][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 444.502171][T14368] __msan_chain_origin+0x50/0x90 [ 444.507084][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.512168][T14368] get_compat_msghdr+0x108/0x270 [ 444.517083][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.521559][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.526275][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.532314][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.538441][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.543618][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.548442][T14368] do_SYSENTER_32+0x73/0x90 [ 444.552919][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.559214][T14368] [ 444.561515][T14368] Uninit was stored to memory at: [ 444.566524][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 444.572239][T14368] __msan_chain_origin+0x50/0x90 [ 444.577169][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.582256][T14368] get_compat_msghdr+0x108/0x270 [ 444.587182][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.591661][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.596317][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.602358][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.608488][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.613677][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.618515][T14368] do_SYSENTER_32+0x73/0x90 [ 444.622991][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.629285][T14368] [ 444.631588][T14368] Uninit was stored to memory at: [ 444.636597][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 444.642290][T14368] __msan_chain_origin+0x50/0x90 [ 444.647204][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.652315][T14368] get_compat_msghdr+0x108/0x270 [ 444.657232][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.661709][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.666361][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.672539][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.678670][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.683849][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.688674][T14368] do_SYSENTER_32+0x73/0x90 [ 444.693148][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.699454][T14368] [ 444.701755][T14368] Uninit was stored to memory at: [ 444.706755][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 444.712448][T14368] __msan_chain_origin+0x50/0x90 [ 444.717375][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.722477][T14368] get_compat_msghdr+0x108/0x270 [ 444.727406][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.731898][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.736555][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.742601][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.748732][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.753925][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.758763][T14368] do_SYSENTER_32+0x73/0x90 [ 444.763241][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.769537][T14368] [ 444.771839][T14368] Uninit was stored to memory at: [ 444.776840][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 444.782535][T14368] __msan_chain_origin+0x50/0x90 [ 444.787450][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.792535][T14368] get_compat_msghdr+0x108/0x270 [ 444.797458][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.801936][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.806591][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.812630][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.818763][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.823955][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.828791][T14368] do_SYSENTER_32+0x73/0x90 [ 444.833270][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.839565][T14368] [ 444.841870][T14368] Uninit was stored to memory at: [ 444.846872][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 444.852561][T14368] __msan_chain_origin+0x50/0x90 [ 444.857478][T14368] __get_compat_msghdr+0x5be/0x890 [ 444.862562][T14368] get_compat_msghdr+0x108/0x270 [ 444.867479][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 444.872058][T14368] __sys_recvmmsg+0x4ca/0x510 [ 444.876796][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.882853][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.888981][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 444.894165][T14368] do_fast_syscall_32+0x6b/0xd0 [ 444.899001][T14368] do_SYSENTER_32+0x73/0x90 [ 444.903492][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.909798][T14368] [ 444.912110][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 444.918760][T14368] do_recvmmsg+0xc5/0x1ee0 [ 444.923153][T14368] do_recvmmsg+0xc5/0x1ee0 [ 445.067870][T14368] not chained 450000 origins [ 445.072489][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 445.081243][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.091294][T14368] Call Trace: [ 445.094599][T14368] dump_stack+0x1df/0x240 [ 445.098950][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 445.104673][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 445.110486][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 445.116557][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 445.121345][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 445.126462][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 445.132010][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 445.138084][T14368] ? _copy_from_user+0x15b/0x260 [ 445.143022][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 445.148134][T14368] __msan_chain_origin+0x50/0x90 [ 445.153076][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.158203][T14368] get_compat_msghdr+0x108/0x270 [ 445.163155][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.167673][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 445.173322][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 445.178443][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 445.184077][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 445.189377][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 445.194141][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 445.198903][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 445.204102][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.208794][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.214867][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 445.221099][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.227234][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.232436][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.237266][T14368] do_SYSENTER_32+0x73/0x90 [ 445.241746][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.248048][T14368] RIP: 0023:0xf7f77549 [ 445.252085][T14368] Code: Bad RIP value. [ 445.256126][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 445.264517][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 445.272476][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 445.280533][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.288484][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 445.296433][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.304402][T14368] Uninit was stored to memory at: [ 445.309419][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 445.315246][T14368] __msan_chain_origin+0x50/0x90 [ 445.320163][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.325274][T14368] get_compat_msghdr+0x108/0x270 [ 445.330207][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.334689][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.339344][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.345400][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.351560][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.356738][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.361562][T14368] do_SYSENTER_32+0x73/0x90 [ 445.366051][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.372366][T14368] [ 445.374670][T14368] Uninit was stored to memory at: [ 445.379674][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 445.385378][T14368] __msan_chain_origin+0x50/0x90 [ 445.390307][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.395395][T14368] get_compat_msghdr+0x108/0x270 [ 445.400311][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.404804][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.409474][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.415514][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.421640][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.426815][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.431642][T14368] do_SYSENTER_32+0x73/0x90 [ 445.436119][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.442413][T14368] [ 445.444720][T14368] Uninit was stored to memory at: [ 445.449750][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 445.455445][T14368] __msan_chain_origin+0x50/0x90 [ 445.460372][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.465482][T14368] get_compat_msghdr+0x108/0x270 [ 445.470404][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.474900][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.479550][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.485601][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.491738][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.496933][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.501769][T14368] do_SYSENTER_32+0x73/0x90 [ 445.506254][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.512548][T14368] [ 445.514866][T14368] Uninit was stored to memory at: [ 445.519865][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 445.525571][T14368] __msan_chain_origin+0x50/0x90 [ 445.530497][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.535582][T14368] get_compat_msghdr+0x108/0x270 [ 445.540562][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.545063][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.549724][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.555900][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.562026][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.567204][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.572027][T14368] do_SYSENTER_32+0x73/0x90 [ 445.576503][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.582795][T14368] [ 445.585101][T14368] Uninit was stored to memory at: [ 445.590119][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 445.595812][T14368] __msan_chain_origin+0x50/0x90 [ 445.600780][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.605877][T14368] get_compat_msghdr+0x108/0x270 [ 445.610821][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.615323][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.619986][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.626029][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.632175][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.637363][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.642186][T14368] do_SYSENTER_32+0x73/0x90 [ 445.646662][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.652955][T14368] [ 445.655264][T14368] Uninit was stored to memory at: [ 445.660277][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 445.665971][T14368] __msan_chain_origin+0x50/0x90 [ 445.670885][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.675982][T14368] get_compat_msghdr+0x108/0x270 [ 445.680906][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.685385][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.690036][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.696079][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.702267][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.707440][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.712272][T14368] do_SYSENTER_32+0x73/0x90 [ 445.716759][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.723067][T14368] [ 445.725369][T14368] Uninit was stored to memory at: [ 445.730369][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 445.736061][T14368] __msan_chain_origin+0x50/0x90 [ 445.740984][T14368] __get_compat_msghdr+0x5be/0x890 [ 445.746071][T14368] get_compat_msghdr+0x108/0x270 [ 445.750982][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 445.755473][T14368] __sys_recvmmsg+0x4ca/0x510 [ 445.760135][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.766186][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.772328][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 445.777504][T14368] do_fast_syscall_32+0x6b/0xd0 [ 445.782328][T14368] do_SYSENTER_32+0x73/0x90 [ 445.786805][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.793119][T14368] [ 445.795430][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 445.802095][T14368] do_recvmmsg+0xc5/0x1ee0 [ 445.806488][T14368] do_recvmmsg+0xc5/0x1ee0 [ 445.952325][T14368] not chained 460000 origins [ 445.956948][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 445.965611][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.975662][T14368] Call Trace: [ 445.978959][T14368] dump_stack+0x1df/0x240 [ 445.983297][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 445.989021][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 445.994835][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 446.000910][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 446.005695][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 446.010811][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 446.016360][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 446.022517][T14368] ? _copy_from_user+0x15b/0x260 [ 446.027463][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 446.032574][T14368] __msan_chain_origin+0x50/0x90 [ 446.037515][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.042644][T14368] get_compat_msghdr+0x108/0x270 [ 446.047598][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.052115][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 446.057764][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 446.062877][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 446.068512][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 446.073802][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 446.078563][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 446.083321][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 446.088538][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.093229][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.099302][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 446.105546][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.111701][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.116895][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.121722][T14368] do_SYSENTER_32+0x73/0x90 [ 446.126203][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.132587][T14368] RIP: 0023:0xf7f77549 [ 446.136623][T14368] Code: Bad RIP value. [ 446.140661][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 446.149045][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 446.157002][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 446.164969][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.173015][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 446.180962][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.188918][T14368] Uninit was stored to memory at: [ 446.193924][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 446.199621][T14368] __msan_chain_origin+0x50/0x90 [ 446.204569][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.209685][T14368] get_compat_msghdr+0x108/0x270 [ 446.214606][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.219086][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.223779][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.229841][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.235975][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.241235][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.246064][T14368] do_SYSENTER_32+0x73/0x90 [ 446.250543][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.256836][T14368] [ 446.259137][T14368] Uninit was stored to memory at: [ 446.264148][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 446.269868][T14368] __msan_chain_origin+0x50/0x90 [ 446.274803][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.279887][T14368] get_compat_msghdr+0x108/0x270 [ 446.284809][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.289298][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.293969][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.300012][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.306141][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.311315][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.316141][T14368] do_SYSENTER_32+0x73/0x90 [ 446.320704][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.327005][T14368] [ 446.329306][T14368] Uninit was stored to memory at: [ 446.334307][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 446.339998][T14368] __msan_chain_origin+0x50/0x90 [ 446.344920][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.350018][T14368] get_compat_msghdr+0x108/0x270 [ 446.354931][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.359407][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.364067][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.370116][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.376252][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.381504][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.386331][T14368] do_SYSENTER_32+0x73/0x90 [ 446.390806][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.397100][T14368] [ 446.399412][T14368] Uninit was stored to memory at: [ 446.404422][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 446.410130][T14368] __msan_chain_origin+0x50/0x90 [ 446.415042][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.420126][T14368] get_compat_msghdr+0x108/0x270 [ 446.425052][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.429544][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.434318][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.440369][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.446506][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.451684][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.456642][T14368] do_SYSENTER_32+0x73/0x90 [ 446.461118][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.467412][T14368] [ 446.469713][T14368] Uninit was stored to memory at: [ 446.474713][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 446.480401][T14368] __msan_chain_origin+0x50/0x90 [ 446.485326][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.490430][T14368] get_compat_msghdr+0x108/0x270 [ 446.495358][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.499878][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.504542][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.510590][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.516730][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.521917][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.526742][T14368] do_SYSENTER_32+0x73/0x90 [ 446.531219][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.537540][T14368] [ 446.539841][T14368] Uninit was stored to memory at: [ 446.544853][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 446.550569][T14368] __msan_chain_origin+0x50/0x90 [ 446.555487][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.560570][T14368] get_compat_msghdr+0x108/0x270 [ 446.565494][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.569983][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.574635][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.580675][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.586857][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.592031][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.596867][T14368] do_SYSENTER_32+0x73/0x90 [ 446.601357][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.607655][T14368] [ 446.609959][T14368] Uninit was stored to memory at: [ 446.614959][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 446.620650][T14368] __msan_chain_origin+0x50/0x90 [ 446.625578][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.630676][T14368] get_compat_msghdr+0x108/0x270 [ 446.635590][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.640065][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.644729][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.650795][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.656936][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 446.662107][T14368] do_fast_syscall_32+0x6b/0xd0 [ 446.666935][T14368] do_SYSENTER_32+0x73/0x90 [ 446.671410][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.677707][T14368] [ 446.680040][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 446.686691][T14368] do_recvmmsg+0xc5/0x1ee0 [ 446.691081][T14368] do_recvmmsg+0xc5/0x1ee0 [ 446.835959][T14368] not chained 470000 origins [ 446.840579][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 446.849242][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.859289][T14368] Call Trace: [ 446.862580][T14368] dump_stack+0x1df/0x240 [ 446.866920][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 446.872647][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 446.878547][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 446.884616][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 446.889402][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 446.894615][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 446.900164][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 446.906238][T14368] ? _copy_from_user+0x15b/0x260 [ 446.911186][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 446.916300][T14368] __msan_chain_origin+0x50/0x90 [ 446.921249][T14368] __get_compat_msghdr+0x5be/0x890 [ 446.926397][T14368] get_compat_msghdr+0x108/0x270 [ 446.931347][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 446.935861][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 446.941528][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 446.946641][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 446.952271][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 446.957559][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 446.962330][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 446.967096][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 446.972297][T14368] __sys_recvmmsg+0x4ca/0x510 [ 446.976986][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.983055][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 446.989299][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.995483][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.000678][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.005508][T14368] do_SYSENTER_32+0x73/0x90 [ 447.009988][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.016304][T14368] RIP: 0023:0xf7f77549 [ 447.020339][T14368] Code: Bad RIP value. [ 447.024375][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 447.032762][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 447.040766][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 447.048712][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.056658][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 447.064605][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.072557][T14368] Uninit was stored to memory at: [ 447.077565][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.083272][T14368] __msan_chain_origin+0x50/0x90 [ 447.088201][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.093299][T14368] get_compat_msghdr+0x108/0x270 [ 447.098220][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.102694][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.107381][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.113428][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.119564][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.124739][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.129563][T14368] do_SYSENTER_32+0x73/0x90 [ 447.134053][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.140359][T14368] [ 447.142659][T14368] Uninit was stored to memory at: [ 447.147661][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.153376][T14368] __msan_chain_origin+0x50/0x90 [ 447.158333][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.163427][T14368] get_compat_msghdr+0x108/0x270 [ 447.168350][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.172826][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.177478][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.183518][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.189645][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.194936][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.199770][T14368] do_SYSENTER_32+0x73/0x90 [ 447.204376][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.210672][T14368] [ 447.213047][T14368] Uninit was stored to memory at: [ 447.218048][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.223739][T14368] __msan_chain_origin+0x50/0x90 [ 447.228652][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.233748][T14368] get_compat_msghdr+0x108/0x270 [ 447.238671][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.243147][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.247804][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.253856][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.260030][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.265208][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.270033][T14368] do_SYSENTER_32+0x73/0x90 [ 447.274519][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.280828][T14368] [ 447.283141][T14368] Uninit was stored to memory at: [ 447.288142][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.293858][T14368] __msan_chain_origin+0x50/0x90 [ 447.298778][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.303862][T14368] get_compat_msghdr+0x108/0x270 [ 447.308800][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.313284][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.317947][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.323989][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.330114][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.335299][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.340132][T14368] do_SYSENTER_32+0x73/0x90 [ 447.344608][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.350902][T14368] [ 447.353212][T14368] Uninit was stored to memory at: [ 447.358240][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.363943][T14368] __msan_chain_origin+0x50/0x90 [ 447.368892][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.374007][T14368] get_compat_msghdr+0x108/0x270 [ 447.378934][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.383508][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.388168][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.394221][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.400364][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.405540][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.410364][T14368] do_SYSENTER_32+0x73/0x90 [ 447.414852][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.421158][T14368] [ 447.423461][T14368] Uninit was stored to memory at: [ 447.428460][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.434177][T14368] __msan_chain_origin+0x50/0x90 [ 447.439115][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.444211][T14368] get_compat_msghdr+0x108/0x270 [ 447.449126][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.453616][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.458280][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.464318][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.470449][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.475632][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.480472][T14368] do_SYSENTER_32+0x73/0x90 [ 447.484952][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.491245][T14368] [ 447.493551][T14368] Uninit was stored to memory at: [ 447.498565][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.504259][T14368] __msan_chain_origin+0x50/0x90 [ 447.509172][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.514269][T14368] get_compat_msghdr+0x108/0x270 [ 447.519192][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.523679][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.528412][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.534465][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.540604][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.545776][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.550602][T14368] do_SYSENTER_32+0x73/0x90 [ 447.555091][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.561397][T14368] [ 447.563698][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 447.570346][T14368] do_recvmmsg+0xc5/0x1ee0 [ 447.574746][T14368] do_recvmmsg+0xc5/0x1ee0 [ 447.720600][T14368] not chained 480000 origins [ 447.725224][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 447.733889][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.743940][T14368] Call Trace: [ 447.747235][T14368] dump_stack+0x1df/0x240 [ 447.751565][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 447.757287][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 447.763097][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 447.769163][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 447.774034][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 447.779279][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 447.784830][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 447.790903][T14368] ? _copy_from_user+0x15b/0x260 [ 447.795849][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 447.800963][T14368] __msan_chain_origin+0x50/0x90 [ 447.805932][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.811058][T14368] get_compat_msghdr+0x108/0x270 [ 447.816010][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.820526][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 447.826174][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 447.831295][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 447.836938][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 447.842227][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 447.846990][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 447.851761][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 447.857400][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.862089][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.868162][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 447.874404][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.880570][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 447.885778][T14368] do_fast_syscall_32+0x6b/0xd0 [ 447.890633][T14368] do_SYSENTER_32+0x73/0x90 [ 447.895141][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.901453][T14368] RIP: 0023:0xf7f77549 [ 447.905493][T14368] Code: Bad RIP value. [ 447.909534][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 447.917934][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 447.925901][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 447.933868][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.941849][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 447.949804][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.957761][T14368] Uninit was stored to memory at: [ 447.962785][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 447.968477][T14368] __msan_chain_origin+0x50/0x90 [ 447.973403][T14368] __get_compat_msghdr+0x5be/0x890 [ 447.978502][T14368] get_compat_msghdr+0x108/0x270 [ 447.983417][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 447.987892][T14368] __sys_recvmmsg+0x4ca/0x510 [ 447.992611][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.998653][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.004782][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.009955][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.014790][T14368] do_SYSENTER_32+0x73/0x90 [ 448.019277][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.025577][T14368] [ 448.027890][T14368] Uninit was stored to memory at: [ 448.032889][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.038587][T14368] __msan_chain_origin+0x50/0x90 [ 448.043503][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.048589][T14368] get_compat_msghdr+0x108/0x270 [ 448.053514][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.058003][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.062653][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.068693][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.074831][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.080014][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.084840][T14368] do_SYSENTER_32+0x73/0x90 [ 448.089315][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.095618][T14368] [ 448.097933][T14368] Uninit was stored to memory at: [ 448.103030][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.108725][T14368] __msan_chain_origin+0x50/0x90 [ 448.113649][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.118748][T14368] get_compat_msghdr+0x108/0x270 [ 448.123678][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.128174][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.132837][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.138905][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.145052][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.150235][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.155071][T14368] do_SYSENTER_32+0x73/0x90 [ 448.159558][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.165853][T14368] [ 448.168153][T14368] Uninit was stored to memory at: [ 448.173164][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.178869][T14368] __msan_chain_origin+0x50/0x90 [ 448.183793][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.188891][T14368] get_compat_msghdr+0x108/0x270 [ 448.193817][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.198309][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.202972][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.209021][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.215171][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.220362][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.225194][T14368] do_SYSENTER_32+0x73/0x90 [ 448.229672][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.235975][T14368] [ 448.238278][T14368] Uninit was stored to memory at: [ 448.243295][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.249013][T14368] __msan_chain_origin+0x50/0x90 [ 448.253952][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.259054][T14368] get_compat_msghdr+0x108/0x270 [ 448.263968][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.268447][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.273106][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.279158][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.285441][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.290616][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.295454][T14368] do_SYSENTER_32+0x73/0x90 [ 448.299942][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.306238][T14368] [ 448.308542][T14368] Uninit was stored to memory at: [ 448.313554][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.319259][T14368] __msan_chain_origin+0x50/0x90 [ 448.324185][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.329268][T14368] get_compat_msghdr+0x108/0x270 [ 448.334304][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.338795][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.343458][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.349502][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.355658][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.360851][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.365680][T14368] do_SYSENTER_32+0x73/0x90 [ 448.370161][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.376460][T14368] [ 448.378778][T14368] Uninit was stored to memory at: [ 448.383797][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.389505][T14368] __msan_chain_origin+0x50/0x90 [ 448.394434][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.399535][T14368] get_compat_msghdr+0x108/0x270 [ 448.404458][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.408967][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.413646][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.419698][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.425826][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.431050][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.435880][T14368] do_SYSENTER_32+0x73/0x90 [ 448.440397][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.446693][T14368] [ 448.448997][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 448.455658][T14368] do_recvmmsg+0xc5/0x1ee0 [ 448.460062][T14368] do_recvmmsg+0xc5/0x1ee0 [ 448.622141][T14368] not chained 490000 origins [ 448.626768][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 448.635432][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.645485][T14368] Call Trace: [ 448.648784][T14368] dump_stack+0x1df/0x240 [ 448.653118][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 448.658834][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 448.664643][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 448.670710][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 448.675499][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 448.680614][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 448.686162][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 448.692235][T14368] ? _copy_from_user+0x15b/0x260 [ 448.697180][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 448.702292][T14368] __msan_chain_origin+0x50/0x90 [ 448.707359][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.712493][T14368] get_compat_msghdr+0x108/0x270 [ 448.717446][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.721954][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 448.727596][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 448.732698][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 448.738309][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 448.743574][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 448.748314][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 448.753057][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 448.758243][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.762921][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.769015][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 448.775233][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.781364][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.786543][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.791370][T14368] do_SYSENTER_32+0x73/0x90 [ 448.795863][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.802174][T14368] RIP: 0023:0xf7f77549 [ 448.806213][T14368] Code: Bad RIP value. [ 448.810254][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 448.818649][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 448.826598][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 448.834549][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.842497][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 448.850442][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.858396][T14368] Uninit was stored to memory at: [ 448.863400][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.869124][T14368] __msan_chain_origin+0x50/0x90 [ 448.874042][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.879128][T14368] get_compat_msghdr+0x108/0x270 [ 448.884054][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.888545][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.893208][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.899258][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.905397][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.910580][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.915406][T14368] do_SYSENTER_32+0x73/0x90 [ 448.919882][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.926178][T14368] [ 448.928487][T14368] Uninit was stored to memory at: [ 448.933490][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 448.939183][T14368] __msan_chain_origin+0x50/0x90 [ 448.944097][T14368] __get_compat_msghdr+0x5be/0x890 [ 448.949183][T14368] get_compat_msghdr+0x108/0x270 [ 448.954096][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 448.958571][T14368] __sys_recvmmsg+0x4ca/0x510 [ 448.963238][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.969292][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.975421][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 448.980592][T14368] do_fast_syscall_32+0x6b/0xd0 [ 448.985416][T14368] do_SYSENTER_32+0x73/0x90 [ 448.989905][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.996203][T14368] [ 448.998503][T14368] Uninit was stored to memory at: [ 449.003501][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.009192][T14368] __msan_chain_origin+0x50/0x90 [ 449.014139][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.019238][T14368] get_compat_msghdr+0x108/0x270 [ 449.024149][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.028627][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.033279][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.039330][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.045470][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.050653][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.055482][T14368] do_SYSENTER_32+0x73/0x90 [ 449.059963][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.066259][T14368] [ 449.068564][T14368] Uninit was stored to memory at: [ 449.073566][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.079276][T14368] __msan_chain_origin+0x50/0x90 [ 449.084195][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.089281][T14368] get_compat_msghdr+0x108/0x270 [ 449.094198][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.098674][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.103323][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.109362][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.115490][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.120663][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.125503][T14368] do_SYSENTER_32+0x73/0x90 [ 449.129995][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.136412][T14368] [ 449.138732][T14368] Uninit was stored to memory at: [ 449.143743][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.149438][T14368] __msan_chain_origin+0x50/0x90 [ 449.154354][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.159440][T14368] get_compat_msghdr+0x108/0x270 [ 449.164357][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.168845][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.173506][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.179554][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.185689][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.190882][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.195715][T14368] do_SYSENTER_32+0x73/0x90 [ 449.200206][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.206507][T14368] [ 449.208813][T14368] Uninit was stored to memory at: [ 449.213828][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.219535][T14368] __msan_chain_origin+0x50/0x90 [ 449.224462][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.229548][T14368] get_compat_msghdr+0x108/0x270 [ 449.234474][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.238972][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.243624][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.249666][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.255795][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.260970][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.265795][T14368] do_SYSENTER_32+0x73/0x90 [ 449.270273][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.276566][T14368] [ 449.278870][T14368] Uninit was stored to memory at: [ 449.283869][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.289557][T14368] __msan_chain_origin+0x50/0x90 [ 449.294470][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.299554][T14368] get_compat_msghdr+0x108/0x270 [ 449.304465][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.308941][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.313734][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.319773][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.325898][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.331071][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.336027][T14368] do_SYSENTER_32+0x73/0x90 [ 449.340503][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.346802][T14368] [ 449.349114][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 449.355766][T14368] do_recvmmsg+0xc5/0x1ee0 [ 449.360165][T14368] do_recvmmsg+0xc5/0x1ee0 [ 449.502821][T14368] not chained 500000 origins [ 449.507455][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 449.516123][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.526175][T14368] Call Trace: [ 449.529474][T14368] dump_stack+0x1df/0x240 [ 449.533814][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 449.539536][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 449.545349][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 449.551416][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 449.556207][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 449.561325][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 449.566875][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 449.572951][T14368] ? _copy_from_user+0x15b/0x260 [ 449.577892][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 449.583091][T14368] __msan_chain_origin+0x50/0x90 [ 449.588032][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.593160][T14368] get_compat_msghdr+0x108/0x270 [ 449.598120][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.602636][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 449.608289][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 449.613405][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 449.619046][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 449.624338][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 449.629105][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 449.633869][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 449.639073][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.643766][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.649838][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 449.656085][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.662241][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.667459][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.672316][T14368] do_SYSENTER_32+0x73/0x90 [ 449.676826][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.683155][T14368] RIP: 0023:0xf7f77549 [ 449.687212][T14368] Code: Bad RIP value. [ 449.691276][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 449.699682][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 449.707738][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 449.715694][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.723655][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 449.731602][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.739558][T14368] Uninit was stored to memory at: [ 449.744567][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.750261][T14368] __msan_chain_origin+0x50/0x90 [ 449.755189][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.760288][T14368] get_compat_msghdr+0x108/0x270 [ 449.765218][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.769719][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.774394][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.780450][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.786591][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.791776][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.796603][T14368] do_SYSENTER_32+0x73/0x90 [ 449.801081][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.807379][T14368] [ 449.809681][T14368] Uninit was stored to memory at: [ 449.814694][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.820402][T14368] __msan_chain_origin+0x50/0x90 [ 449.825318][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.830406][T14368] get_compat_msghdr+0x108/0x270 [ 449.835331][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.839822][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.844563][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.850600][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.856725][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.861896][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.866719][T14368] do_SYSENTER_32+0x73/0x90 [ 449.871198][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.877492][T14368] [ 449.879792][T14368] Uninit was stored to memory at: [ 449.884790][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.890481][T14368] __msan_chain_origin+0x50/0x90 [ 449.895405][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.900507][T14368] get_compat_msghdr+0x108/0x270 [ 449.905423][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.909903][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.914574][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.920683][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.926825][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 449.932012][T14368] do_fast_syscall_32+0x6b/0xd0 [ 449.936837][T14368] do_SYSENTER_32+0x73/0x90 [ 449.941321][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.947613][T14368] [ 449.950002][T14368] Uninit was stored to memory at: [ 449.955011][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 449.960715][T14368] __msan_chain_origin+0x50/0x90 [ 449.965686][T14368] __get_compat_msghdr+0x5be/0x890 [ 449.970770][T14368] get_compat_msghdr+0x108/0x270 [ 449.975781][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 449.980257][T14368] __sys_recvmmsg+0x4ca/0x510 [ 449.984994][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.991031][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.997159][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.002329][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.007153][T14368] do_SYSENTER_32+0x73/0x90 [ 450.011644][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.017941][T14368] [ 450.020240][T14368] Uninit was stored to memory at: [ 450.025241][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.030980][T14368] __msan_chain_origin+0x50/0x90 [ 450.035904][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.040990][T14368] get_compat_msghdr+0x108/0x270 [ 450.045901][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.050377][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.055056][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.061109][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.067237][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.072411][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.077240][T14368] do_SYSENTER_32+0x73/0x90 [ 450.081763][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.088057][T14368] [ 450.090356][T14368] Uninit was stored to memory at: [ 450.095367][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.101071][T14368] __msan_chain_origin+0x50/0x90 [ 450.105982][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.111067][T14368] get_compat_msghdr+0x108/0x270 [ 450.115989][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.120476][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.125129][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.131164][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.137291][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.142475][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.147297][T14368] do_SYSENTER_32+0x73/0x90 [ 450.151780][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.158075][T14368] [ 450.160378][T14368] Uninit was stored to memory at: [ 450.165398][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.171089][T14368] __msan_chain_origin+0x50/0x90 [ 450.176004][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.181088][T14368] get_compat_msghdr+0x108/0x270 [ 450.186001][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.190482][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.195145][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.201217][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.207359][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.212534][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.217373][T14368] do_SYSENTER_32+0x73/0x90 [ 450.221855][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.228150][T14368] [ 450.230458][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 450.237111][T14368] do_recvmmsg+0xc5/0x1ee0 [ 450.241503][T14368] do_recvmmsg+0xc5/0x1ee0 [ 450.457026][T14368] not chained 510000 origins [ 450.461653][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 450.470318][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.480368][T14368] Call Trace: [ 450.483660][T14368] dump_stack+0x1df/0x240 [ 450.487999][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 450.493849][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 450.499656][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 450.505726][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 450.510510][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 450.515625][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 450.521192][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 450.527303][T14368] ? _copy_from_user+0x15b/0x260 [ 450.532244][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 450.537358][T14368] __msan_chain_origin+0x50/0x90 [ 450.542307][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.547437][T14368] get_compat_msghdr+0x108/0x270 [ 450.552389][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.556900][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 450.562553][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 450.567653][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 450.573262][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 450.578528][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 450.583282][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 450.588033][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 450.593216][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.597877][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.603953][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 450.610191][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.616326][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.621510][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.626341][T14368] do_SYSENTER_32+0x73/0x90 [ 450.630824][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.637132][T14368] RIP: 0023:0xf7f77549 [ 450.641171][T14368] Code: Bad RIP value. [ 450.645238][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 450.653646][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 450.661594][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 450.669545][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.677495][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 450.685449][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.693418][T14368] Uninit was stored to memory at: [ 450.698430][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.704265][T14368] __msan_chain_origin+0x50/0x90 [ 450.709190][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.714277][T14368] get_compat_msghdr+0x108/0x270 [ 450.719192][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.723684][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.728349][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.734395][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.740522][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.745701][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.750575][T14368] do_SYSENTER_32+0x73/0x90 [ 450.755054][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.761349][T14368] [ 450.763655][T14368] Uninit was stored to memory at: [ 450.768685][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.774387][T14368] __msan_chain_origin+0x50/0x90 [ 450.779310][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.784408][T14368] get_compat_msghdr+0x108/0x270 [ 450.789339][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.793818][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.798469][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.804523][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.810675][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.815866][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.820695][T14368] do_SYSENTER_32+0x73/0x90 [ 450.825177][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.831470][T14368] [ 450.833780][T14368] Uninit was stored to memory at: [ 450.838791][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.844488][T14368] __msan_chain_origin+0x50/0x90 [ 450.849400][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.854500][T14368] get_compat_msghdr+0x108/0x270 [ 450.859425][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.863902][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.868554][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.874603][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.880744][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.885928][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.890765][T14368] do_SYSENTER_32+0x73/0x90 [ 450.895257][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.901562][T14368] [ 450.903864][T14368] Uninit was stored to memory at: [ 450.908864][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.914568][T14368] __msan_chain_origin+0x50/0x90 [ 450.919494][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.924582][T14368] get_compat_msghdr+0x108/0x270 [ 450.929494][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 450.933980][T14368] __sys_recvmmsg+0x4ca/0x510 [ 450.938643][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.944683][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.950811][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 450.955987][T14368] do_fast_syscall_32+0x6b/0xd0 [ 450.960812][T14368] do_SYSENTER_32+0x73/0x90 [ 450.965297][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.971598][T14368] [ 450.973902][T14368] Uninit was stored to memory at: [ 450.978913][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 450.984607][T14368] __msan_chain_origin+0x50/0x90 [ 450.989517][T14368] __get_compat_msghdr+0x5be/0x890 [ 450.994611][T14368] get_compat_msghdr+0x108/0x270 [ 450.999591][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.004069][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.008720][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.014774][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.020913][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.026087][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.030912][T14368] do_SYSENTER_32+0x73/0x90 [ 451.035391][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.041687][T14368] [ 451.043989][T14368] Uninit was stored to memory at: [ 451.048989][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.054695][T14368] __msan_chain_origin+0x50/0x90 [ 451.059621][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.064710][T14368] get_compat_msghdr+0x108/0x270 [ 451.069621][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.074127][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.078790][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.084831][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.090959][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.096135][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.100960][T14368] do_SYSENTER_32+0x73/0x90 [ 451.105447][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.111757][T14368] [ 451.114062][T14368] Uninit was stored to memory at: [ 451.119074][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.124771][T14368] __msan_chain_origin+0x50/0x90 [ 451.129695][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.134790][T14368] get_compat_msghdr+0x108/0x270 [ 451.139716][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.144207][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.148858][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.154911][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.161050][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.166243][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.171067][T14368] do_SYSENTER_32+0x73/0x90 [ 451.175545][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.181839][T14368] [ 451.184140][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 451.190785][T14368] do_recvmmsg+0xc5/0x1ee0 [ 451.195196][T14368] do_recvmmsg+0xc5/0x1ee0 [ 451.392049][T14368] not chained 520000 origins [ 451.396676][T14368] CPU: 0 PID: 14368 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 451.405341][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.415394][T14368] Call Trace: [ 451.418696][T14368] dump_stack+0x1df/0x240 [ 451.423033][T14368] kmsan_internal_chain_origin+0x6f/0x130 [ 451.428758][T14368] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 451.434571][T14368] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 451.440636][T14368] ? udp_recvmsg+0x1b8c/0x2100 [ 451.445423][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 451.450542][T14368] ? kmsan_set_origin_checked+0x95/0xf0 [ 451.456088][T14368] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 451.462158][T14368] ? _copy_from_user+0x15b/0x260 [ 451.467097][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 451.472211][T14368] __msan_chain_origin+0x50/0x90 [ 451.477158][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.482286][T14368] get_compat_msghdr+0x108/0x270 [ 451.487258][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.491777][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 451.497424][T14368] ? kmsan_get_metadata+0x4f/0x180 [ 451.502541][T14368] ? kmsan_internal_set_origin+0x75/0xb0 [ 451.508180][T14368] ? __msan_poison_alloca+0xf0/0x120 [ 451.513475][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 451.518236][T14368] ? __sys_recvmmsg+0xb4/0x510 [ 451.522998][T14368] ? kmsan_get_metadata+0x11d/0x180 [ 451.528198][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.532904][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.539000][T14368] ? __x32_compat_sys_recvmmsg_time64+0x80/0x80 [ 451.545244][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.551403][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.556626][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.561488][T14368] do_SYSENTER_32+0x73/0x90 [ 451.565996][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.572318][T14368] RIP: 0023:0xf7f77549 [ 451.576374][T14368] Code: Bad RIP value. [ 451.580439][T14368] RSP: 002b:00000000f5d510cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 451.588849][T14368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 451.596810][T14368] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 451.604765][T14368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.612728][T14368] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 451.620674][T14368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.628627][T14368] Uninit was stored to memory at: [ 451.633633][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.639322][T14368] __msan_chain_origin+0x50/0x90 [ 451.644265][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.649361][T14368] get_compat_msghdr+0x108/0x270 [ 451.654416][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.658910][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.663573][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.669622][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.675750][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.680990][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.685830][T14368] do_SYSENTER_32+0x73/0x90 [ 451.690325][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.696620][T14368] [ 451.698922][T14368] Uninit was stored to memory at: [ 451.704049][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.709756][T14368] __msan_chain_origin+0x50/0x90 [ 451.714670][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.719754][T14368] get_compat_msghdr+0x108/0x270 [ 451.724680][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.729168][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.733818][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.739855][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.745984][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.751158][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.755982][T14368] do_SYSENTER_32+0x73/0x90 [ 451.760466][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.766768][T14368] [ 451.769095][T14368] Uninit was stored to memory at: [ 451.774114][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.779808][T14368] __msan_chain_origin+0x50/0x90 [ 451.784734][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.789832][T14368] get_compat_msghdr+0x108/0x270 [ 451.794746][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.799221][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.803883][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.809935][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.816064][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.821240][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.826066][T14368] do_SYSENTER_32+0x73/0x90 [ 451.830541][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.836836][T14368] [ 451.839137][T14368] Uninit was stored to memory at: [ 451.844150][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.849867][T14368] __msan_chain_origin+0x50/0x90 [ 451.854794][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.859880][T14368] get_compat_msghdr+0x108/0x270 [ 451.864796][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.869274][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.873933][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.879987][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.886114][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.891286][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.896123][T14368] do_SYSENTER_32+0x73/0x90 [ 451.900597][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.906925][T14368] [ 451.909225][T14368] Uninit was stored to memory at: [ 451.914237][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.920084][T14368] __msan_chain_origin+0x50/0x90 [ 451.925001][T14368] __get_compat_msghdr+0x5be/0x890 [ 451.930086][T14368] get_compat_msghdr+0x108/0x270 [ 451.935008][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 451.939496][T14368] __sys_recvmmsg+0x4ca/0x510 [ 451.944145][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.950183][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.956311][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 451.961494][T14368] do_fast_syscall_32+0x6b/0xd0 [ 451.966328][T14368] do_SYSENTER_32+0x73/0x90 [ 451.970925][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.977230][T14368] [ 451.979528][T14368] Uninit was stored to memory at: [ 451.984535][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 451.990241][T14368] __msan_chain_origin+0x50/0x90 [ 451.995169][T14368] __get_compat_msghdr+0x5be/0x890 [ 452.000269][T14368] get_compat_msghdr+0x108/0x270 [ 452.005199][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 452.009692][T14368] __sys_recvmmsg+0x4ca/0x510 [ 452.014354][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.020404][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.026536][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 452.031707][T14368] do_fast_syscall_32+0x6b/0xd0 [ 452.036532][T14368] do_SYSENTER_32+0x73/0x90 [ 452.041008][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.047305][T14368] [ 452.049610][T14368] Uninit was stored to memory at: [ 452.054624][T14368] kmsan_internal_chain_origin+0xad/0x130 [ 452.060327][T14368] __msan_chain_origin+0x50/0x90 [ 452.065259][T14368] __get_compat_msghdr+0x5be/0x890 [ 452.070343][T14368] get_compat_msghdr+0x108/0x270 [ 452.075256][T14368] do_recvmmsg+0xa6a/0x1ee0 [ 452.079731][T14368] __sys_recvmmsg+0x4ca/0x510 [ 452.084378][T14368] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.090415][T14368] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.096554][T14368] __do_fast_syscall_32+0x2aa/0x400 [ 452.101739][T14368] do_fast_syscall_32+0x6b/0xd0 [ 452.106565][T14368] do_SYSENTER_32+0x73/0x90 [ 452.111043][T14368] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.117364][T14368] [ 452.119665][T14368] Local variable ----msg_sys@do_recvmmsg created at: [ 452.126313][T14368] do_recvmmsg+0xc5/0x1ee0 [ 452.130702][T14368] do_recvmmsg+0xc5/0x1ee0 18:32:55 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa011}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='erspan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='stack\x00') sendfile(r0, r1, 0x0, 0x14) 18:32:55 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_getoverrun(0x0) 18:32:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1f000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:32:55 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)) 18:32:55 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1031fe, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYBLOB="1221c41337f86b65b75256a573f0edf85c9aa443ae62d8a88c8229ca00473a5058eb6a71d051653a3224e5b9fba769c8561718ea4bc33ff4ba11368eda909d5f6a7d37233ecf6e11159ada7bf93485df7ee56b6db950efe2c0bb0370a4c119f4930cbc8c87bff7ef92ed9fd36d7d2cbb4b8a566f7be69b9070849fe24b97ba257b3a530379100ca366231eb2ec05ac4ac2c7486d6a929a68d4c349c3da5ef5d234ec5425120cb09b8ce30f8d45bc4bf107ac76c56880f27777b1c485d2259641370858cbc0ab5190d8b714cc2f34f059cf73989d0ea6ba89f883f0880d9b806a4fcb1c5c7110dcb908ab8dd465afaf6b18dd7839970b286bbc"], 0x1f) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x1}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:55 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000b6b23e9b200a00080001c0000000010000", 0x7c, 0x0, 0x0, 0x0) [ 452.546716][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:32:55 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)) [ 452.614347][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:32:55 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='stack\x00') sendfile(r0, r1, 0x0, 0x14) [ 452.897750][ C0] ===================================================== [ 452.904727][ C0] BUG: KMSAN: uninit-value in __skb_checksum_complete+0x37f/0x540 [ 452.912521][ C0] CPU: 0 PID: 14489 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 452.921172][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.931213][ C0] Call Trace: [ 452.934482][ C0] [ 452.937324][ C0] dump_stack+0x1df/0x240 [ 452.941644][ C0] kmsan_report+0xf7/0x1e0 [ 452.946051][ C0] __msan_warning+0x58/0xa0 [ 452.950543][ C0] __skb_checksum_complete+0x37f/0x540 [ 452.955992][ C0] ? __skb_checksum+0x12a0/0x12a0 [ 452.961001][ C0] ? csum_partial_ext+0xa0/0xa0 [ 452.965837][ C0] nf_ip_checksum+0x53b/0x740 [ 452.970510][ C0] nf_nat_icmp_reply_translation+0x2ba/0x980 [ 452.976484][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 452.981601][ C0] nf_nat_ipv4_local_fn+0x215/0x830 [ 452.986793][ C0] ? nf_nat_ipv4_out+0x780/0x780 [ 452.991715][ C0] nf_hook_slow+0x16e/0x400 [ 452.996215][ C0] __ip_local_out+0x69b/0x800 [ 453.000897][ C0] ? __ip_local_out+0x800/0x800 [ 453.005735][ C0] ip_push_pending_frames+0x16f/0x460 [ 453.011101][ C0] icmp_push_reply+0x660/0x710 [ 453.015859][ C0] __icmp_send+0x23ca/0x3150 [ 453.020462][ C0] ? __udp4_lib_lookup+0x53f/0x5f0 [ 453.025565][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 453.030751][ C0] __udp4_lib_rcv+0x3773/0x4b80 [ 453.035610][ C0] udp_rcv+0x5c/0x70 [ 453.039492][ C0] ? udp_v4_early_demux+0x1ef0/0x1ef0 [ 453.044848][ C0] ip_protocol_deliver_rcu+0x619/0xbc0 [ 453.050297][ C0] ip_local_deliver+0x62a/0x7c0 [ 453.055141][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 453.060151][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 453.065770][ C0] ip_rcv+0x6cf/0x750 [ 453.069744][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 453.074498][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 453.080135][ C0] process_backlog+0xfb5/0x14e0 [ 453.084975][ C0] ? lapic_next_event+0x6e/0xa0 [ 453.089824][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 453.095095][ C0] net_rx_action+0x746/0x1aa0 [ 453.099770][ C0] ? net_tx_action+0xc40/0xc40 [ 453.104521][ C0] __do_softirq+0x311/0x83d [ 453.109021][ C0] asm_call_on_stack+0x12/0x20 [ 453.113764][ C0] [ 453.116692][ C0] do_softirq_own_stack+0x7c/0xa0 [ 453.121701][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 453.126891][ C0] local_bh_enable+0x36/0x40 [ 453.131466][ C0] ip_finish_output2+0x1fee/0x24a0 [ 453.136568][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 453.142548][ C0] __ip_finish_output+0xaa7/0xd80 [ 453.147569][ C0] ip_finish_output+0x166/0x410 [ 453.152423][ C0] ip_output+0x593/0x680 [ 453.156666][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 453.161936][ C0] ? ip_finish_output+0x410/0x410 [ 453.166949][ C0] ip_send_skb+0x179/0x360 [ 453.171359][ C0] udp_send_skb+0x1046/0x18b0 [ 453.176034][ C0] udp_sendmsg+0x3bb5/0x4100 [ 453.180612][ C0] ? ip_do_fragment+0x3570/0x3570 [ 453.185631][ C0] ? clear_sched_clock_stable+0xd0/0xe0 [ 453.191181][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 453.196367][ C0] udpv6_sendmsg+0x1598/0x4940 [ 453.201121][ C0] ? is_module_text_address+0x4d/0x2a0 [ 453.206583][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 453.211695][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 453.217496][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 453.223560][ C0] ? tomoyo_socket_sendmsg_permission+0x41c/0x4a0 [ 453.229965][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 453.235154][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 453.240946][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 453.247002][ C0] ? inet_send_prepare+0x92/0x600 [ 453.252008][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 453.257193][ C0] ? udpv6_rcv+0x70/0x70 [ 453.261419][ C0] ? udpv6_rcv+0x70/0x70 [ 453.265651][ C0] inet6_sendmsg+0x276/0x2e0 [ 453.270235][ C0] kernel_sendmsg+0x24a/0x440 [ 453.274907][ C0] sock_no_sendpage+0x235/0x300 [ 453.279753][ C0] ? sock_no_mmap+0x30/0x30 [ 453.284246][ C0] sock_sendpage+0x1e1/0x2c0 [ 453.288845][ C0] pipe_to_sendpage+0x38c/0x4c0 [ 453.293685][ C0] ? sock_fasync+0x250/0x250 [ 453.298270][ C0] __splice_from_pipe+0x565/0xf00 [ 453.303283][ C0] ? generic_splice_sendpage+0x2d0/0x2d0 [ 453.308911][ C0] generic_splice_sendpage+0x1d5/0x2d0 [ 453.314364][ C0] ? iter_file_splice_write+0x1800/0x1800 [ 453.320088][ C0] direct_splice_actor+0x1fd/0x580 [ 453.325194][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 453.330311][ C0] splice_direct_to_actor+0x6b2/0xf50 [ 453.335669][ C0] ? do_splice_direct+0x580/0x580 [ 453.340692][ C0] do_splice_direct+0x342/0x580 [ 453.345537][ C0] do_sendfile+0x101b/0x1d40 [ 453.350127][ C0] __se_compat_sys_sendfile+0x301/0x3c0 [ 453.355664][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 453.360843][ C0] ? __ia32_sys_sendfile64+0x70/0x70 [ 453.366115][ C0] __ia32_compat_sys_sendfile+0x56/0x70 [ 453.371678][ C0] __do_fast_syscall_32+0x2aa/0x400 [ 453.376878][ C0] do_fast_syscall_32+0x6b/0xd0 [ 453.381727][ C0] do_SYSENTER_32+0x73/0x90 [ 453.386225][ C0] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.392538][ C0] RIP: 0023:0xf7f77549 [ 453.396599][ C0] Code: Bad RIP value. [ 453.400646][ C0] RSP: 002b:00000000f5d720cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 453.409038][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 453.416995][ C0] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000000 [ 453.424953][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.432921][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 453.440893][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.448863][ C0] [ 453.451174][ C0] Uninit was stored to memory at: [ 453.456193][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 453.461894][ C0] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 453.467857][ C0] kmsan_memcpy_metadata+0xb/0x10 [ 453.472864][ C0] __msan_memcpy+0x43/0x50 [ 453.477276][ C0] csum_partial_copy+0xae/0x100 [ 453.482111][ C0] skb_copy_and_csum_bits+0x227/0x1130 [ 453.487553][ C0] icmp_glue_bits+0x166/0x380 [ 453.492215][ C0] __ip_append_data+0x47c4/0x5630 [ 453.497222][ C0] ip_append_data+0x328/0x480 [ 453.501882][ C0] icmp_push_reply+0x206/0x710 [ 453.506631][ C0] __icmp_send+0x23ca/0x3150 [ 453.511205][ C0] __udp4_lib_rcv+0x3773/0x4b80 [ 453.516048][ C0] udp_rcv+0x5c/0x70 [ 453.519926][ C0] ip_protocol_deliver_rcu+0x619/0xbc0 [ 453.525461][ C0] ip_local_deliver+0x62a/0x7c0 [ 453.530293][ C0] ip_rcv+0x6cf/0x750 [ 453.534261][ C0] process_backlog+0xfb5/0x14e0 [ 453.539100][ C0] net_rx_action+0x746/0x1aa0 [ 453.543760][ C0] __do_softirq+0x311/0x83d [ 453.548236][ C0] [ 453.550544][ C0] Uninit was stored to memory at: [ 453.555572][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 453.561276][ C0] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 453.567241][ C0] kmsan_memcpy_metadata+0xb/0x10 [ 453.572249][ C0] __msan_memcpy+0x43/0x50 [ 453.576653][ C0] _copy_from_iter_full+0xbfe/0x13b0 [ 453.581919][ C0] ip_generic_getfrag+0x14a/0x3c0 [ 453.586930][ C0] __ip_append_data+0x47c4/0x5630 [ 453.591936][ C0] ip_make_skb+0x392/0x890 [ 453.596339][ C0] udp_sendmsg+0x36dc/0x4100 [ 453.600961][ C0] udpv6_sendmsg+0x1598/0x4940 [ 453.605719][ C0] inet6_sendmsg+0x276/0x2e0 [ 453.610301][ C0] kernel_sendmsg+0x24a/0x440 [ 453.614971][ C0] sock_no_sendpage+0x235/0x300 [ 453.619812][ C0] sock_sendpage+0x1e1/0x2c0 [ 453.624393][ C0] pipe_to_sendpage+0x38c/0x4c0 [ 453.629234][ C0] __splice_from_pipe+0x565/0xf00 [ 453.634256][ C0] generic_splice_sendpage+0x1d5/0x2d0 [ 453.639714][ C0] direct_splice_actor+0x1fd/0x580 [ 453.644819][ C0] splice_direct_to_actor+0x6b2/0xf50 [ 453.650182][ C0] do_splice_direct+0x342/0x580 [ 453.655022][ C0] do_sendfile+0x101b/0x1d40 [ 453.659602][ C0] __se_compat_sys_sendfile+0x301/0x3c0 [ 453.665133][ C0] __ia32_compat_sys_sendfile+0x56/0x70 [ 453.670662][ C0] __do_fast_syscall_32+0x2aa/0x400 [ 453.675847][ C0] do_fast_syscall_32+0x6b/0xd0 [ 453.680682][ C0] do_SYSENTER_32+0x73/0x90 [ 453.685169][ C0] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.691517][ C0] [ 453.693823][ C0] Uninit was created at: [ 453.698097][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 453.703713][ C0] kmsan_alloc_page+0xb9/0x180 [ 453.708460][ C0] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 453.713990][ C0] alloc_pages_current+0x672/0x990 [ 453.719083][ C0] push_pipe+0x605/0xb70 [ 453.723307][ C0] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 453.729008][ C0] do_splice_to+0x4fc/0x14f0 [ 453.733583][ C0] splice_direct_to_actor+0x45c/0xf50 [ 453.738939][ C0] do_splice_direct+0x342/0x580 [ 453.743777][ C0] do_sendfile+0x101b/0x1d40 [ 453.748348][ C0] __se_compat_sys_sendfile+0x301/0x3c0 [ 453.753886][ C0] __ia32_compat_sys_sendfile+0x56/0x70 [ 453.759442][ C0] __do_fast_syscall_32+0x2aa/0x400 [ 453.764648][ C0] do_fast_syscall_32+0x6b/0xd0 [ 453.769493][ C0] do_SYSENTER_32+0x73/0x90 [ 453.773984][ C0] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.780292][ C0] ===================================================== [ 453.787206][ C0] Disabling lock debugging due to kernel taint [ 453.793339][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 453.799921][ C0] CPU: 0 PID: 14489 Comm: syz-executor.5 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 453.809961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.819998][ C0] Call Trace: [ 453.823269][ C0] [ 453.826116][ C0] dump_stack+0x1df/0x240 [ 453.830439][ C0] panic+0x3d5/0xc3e [ 453.834344][ C0] kmsan_report+0x1df/0x1e0 [ 453.838846][ C0] __msan_warning+0x58/0xa0 [ 453.843346][ C0] __skb_checksum_complete+0x37f/0x540 [ 453.848798][ C0] ? __skb_checksum+0x12a0/0x12a0 [ 453.853917][ C0] ? csum_partial_ext+0xa0/0xa0 [ 453.858758][ C0] nf_ip_checksum+0x53b/0x740 [ 453.863430][ C0] nf_nat_icmp_reply_translation+0x2ba/0x980 [ 453.869402][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 453.874508][ C0] nf_nat_ipv4_local_fn+0x215/0x830 [ 453.879702][ C0] ? nf_nat_ipv4_out+0x780/0x780 [ 453.884631][ C0] nf_hook_slow+0x16e/0x400 [ 453.889129][ C0] __ip_local_out+0x69b/0x800 [ 453.893802][ C0] ? __ip_local_out+0x800/0x800 [ 453.898643][ C0] ip_push_pending_frames+0x16f/0x460 [ 453.904008][ C0] icmp_push_reply+0x660/0x710 [ 453.908766][ C0] __icmp_send+0x23ca/0x3150 [ 453.913365][ C0] ? __udp4_lib_lookup+0x53f/0x5f0 [ 453.918471][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 453.923658][ C0] __udp4_lib_rcv+0x3773/0x4b80 [ 453.928516][ C0] udp_rcv+0x5c/0x70 [ 453.932399][ C0] ? udp_v4_early_demux+0x1ef0/0x1ef0 [ 453.937757][ C0] ip_protocol_deliver_rcu+0x619/0xbc0 [ 453.943210][ C0] ip_local_deliver+0x62a/0x7c0 [ 453.948053][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 453.953061][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 453.958680][ C0] ip_rcv+0x6cf/0x750 [ 453.962665][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 453.967425][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 453.973043][ C0] process_backlog+0xfb5/0x14e0 [ 453.977883][ C0] ? lapic_next_event+0x6e/0xa0 [ 453.982733][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 453.988004][ C0] net_rx_action+0x746/0x1aa0 [ 453.992684][ C0] ? net_tx_action+0xc40/0xc40 [ 453.997453][ C0] __do_softirq+0x311/0x83d [ 454.001947][ C0] asm_call_on_stack+0x12/0x20 [ 454.006690][ C0] [ 454.009637][ C0] do_softirq_own_stack+0x7c/0xa0 [ 454.014653][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 454.019842][ C0] local_bh_enable+0x36/0x40 [ 454.024418][ C0] ip_finish_output2+0x1fee/0x24a0 [ 454.029522][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 454.035499][ C0] __ip_finish_output+0xaa7/0xd80 [ 454.040517][ C0] ip_finish_output+0x166/0x410 [ 454.045370][ C0] ip_output+0x593/0x680 [ 454.049627][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 454.054895][ C0] ? ip_finish_output+0x410/0x410 [ 454.059937][ C0] ip_send_skb+0x179/0x360 [ 454.064352][ C0] udp_send_skb+0x1046/0x18b0 [ 454.069026][ C0] udp_sendmsg+0x3bb5/0x4100 [ 454.073605][ C0] ? ip_do_fragment+0x3570/0x3570 [ 454.078628][ C0] ? clear_sched_clock_stable+0xd0/0xe0 [ 454.084181][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.089383][ C0] udpv6_sendmsg+0x1598/0x4940 [ 454.094137][ C0] ? is_module_text_address+0x4d/0x2a0 [ 454.099598][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 454.104700][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 454.110493][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 454.116550][ C0] ? tomoyo_socket_sendmsg_permission+0x41c/0x4a0 [ 454.122952][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.128139][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 454.133930][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 454.139982][ C0] ? inet_send_prepare+0x92/0x600 [ 454.144991][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.150198][ C0] ? udpv6_rcv+0x70/0x70 [ 454.154473][ C0] ? udpv6_rcv+0x70/0x70 [ 454.158707][ C0] inet6_sendmsg+0x276/0x2e0 [ 454.163302][ C0] kernel_sendmsg+0x24a/0x440 [ 454.167977][ C0] sock_no_sendpage+0x235/0x300 [ 454.172827][ C0] ? sock_no_mmap+0x30/0x30 [ 454.177319][ C0] sock_sendpage+0x1e1/0x2c0 [ 454.181910][ C0] pipe_to_sendpage+0x38c/0x4c0 [ 454.186768][ C0] ? sock_fasync+0x250/0x250 [ 454.191367][ C0] __splice_from_pipe+0x565/0xf00 [ 454.196391][ C0] ? generic_splice_sendpage+0x2d0/0x2d0 [ 454.202071][ C0] generic_splice_sendpage+0x1d5/0x2d0 [ 454.207546][ C0] ? iter_file_splice_write+0x1800/0x1800 [ 454.213264][ C0] direct_splice_actor+0x1fd/0x580 [ 454.218376][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 454.223480][ C0] splice_direct_to_actor+0x6b2/0xf50 [ 454.228837][ C0] ? do_splice_direct+0x580/0x580 [ 454.233865][ C0] do_splice_direct+0x342/0x580 [ 454.238717][ C0] do_sendfile+0x101b/0x1d40 [ 454.243312][ C0] __se_compat_sys_sendfile+0x301/0x3c0 [ 454.248849][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.254033][ C0] ? __ia32_sys_sendfile64+0x70/0x70 [ 454.259301][ C0] __ia32_compat_sys_sendfile+0x56/0x70 [ 454.264837][ C0] __do_fast_syscall_32+0x2aa/0x400 [ 454.270028][ C0] do_fast_syscall_32+0x6b/0xd0 [ 454.274871][ C0] do_SYSENTER_32+0x73/0x90 [ 454.279364][ C0] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.285674][ C0] RIP: 0023:0xf7f77549 [ 454.289720][ C0] Code: Bad RIP value. [ 454.293769][ C0] RSP: 002b:00000000f5d720cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 454.302182][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 454.310136][ C0] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000000 [ 454.318090][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.326048][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 454.334004][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.342664][ C0] ------------[ cut here ]------------ [ 454.348106][ C0] kernel BUG at mm/kmsan/kmsan.h:87! [ 454.353380][ C0] invalid opcode: 0000 [#1] SMP [ 454.358214][ C0] CPU: 0 PID: 14489 Comm: syz-executor.5 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 454.368251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.378300][ C0] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 454.384963][ C0] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 ea 03 0a b8 31 c0 e8 81 fc 44 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 32 3d 8c 0c 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 454.404780][ C0] RSP: 0018:ffffb13d80002d38 EFLAGS: 00010046 [ 454.410837][ C0] RAX: 0000000000000002 RBX: 00000000056900c6 RCX: 00000000056900c6 [ 454.418781][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffb13d80002e14 [ 454.426725][ C0] RBP: ffffb13d80002de0 R08: 0000000000000000 R09: ffffa382afc28210 [ 454.434676][ C0] R10: 0000000000000000 R11: ffffffffaee02930 R12: 0000000000000000 [ 454.442619][ C0] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 454.450695][ C0] FS: 0000000000000000(0000) GS:ffffa382afc00000(0063) knlGS:00000000f5d72b40 [ 454.459594][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 454.466150][ C0] CR2: 000000002c220000 CR3: 000000012dff2000 CR4: 00000000001426f0 [ 454.474098][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.482153][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.490097][ C0] Call Trace: [ 454.493355][ C0] [ 454.496194][ C0] kmsan_check_memory+0xd/0x10 [ 454.500945][ C0] iowrite8+0x99/0x2e0 [ 454.504988][ C0] pvpanic_panic_notify+0x99/0xc0 [ 454.509985][ C0] ? pvpanic_mmio_remove+0x60/0x60 [ 454.515068][ C0] atomic_notifier_call_chain+0x130/0x250 [ 454.520763][ C0] panic+0x468/0xc3e [ 454.524643][ C0] kmsan_report+0x1df/0x1e0 [ 454.529128][ C0] __msan_warning+0x58/0xa0 [ 454.533605][ C0] __skb_checksum_complete+0x37f/0x540 [ 454.539038][ C0] ? __skb_checksum+0x12a0/0x12a0 [ 454.544036][ C0] ? csum_partial_ext+0xa0/0xa0 [ 454.548861][ C0] nf_ip_checksum+0x53b/0x740 [ 454.553517][ C0] nf_nat_icmp_reply_translation+0x2ba/0x980 [ 454.559482][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 454.564571][ C0] nf_nat_ipv4_local_fn+0x215/0x830 [ 454.569746][ C0] ? nf_nat_ipv4_out+0x780/0x780 [ 454.574656][ C0] nf_hook_slow+0x16e/0x400 [ 454.579145][ C0] __ip_local_out+0x69b/0x800 [ 454.583797][ C0] ? __ip_local_out+0x800/0x800 [ 454.588621][ C0] ip_push_pending_frames+0x16f/0x460 [ 454.593972][ C0] icmp_push_reply+0x660/0x710 [ 454.598726][ C0] __icmp_send+0x23ca/0x3150 [ 454.603301][ C0] ? __udp4_lib_lookup+0x53f/0x5f0 [ 454.608388][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.613563][ C0] __udp4_lib_rcv+0x3773/0x4b80 [ 454.618404][ C0] udp_rcv+0x5c/0x70 [ 454.622273][ C0] ? udp_v4_early_demux+0x1ef0/0x1ef0 [ 454.627621][ C0] ip_protocol_deliver_rcu+0x619/0xbc0 [ 454.633057][ C0] ip_local_deliver+0x62a/0x7c0 [ 454.637887][ C0] ? ip_local_deliver+0x7c0/0x7c0 [ 454.642885][ C0] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 454.648508][ C0] ip_rcv+0x6cf/0x750 [ 454.652469][ C0] ? ip_rcv_core+0x12c0/0x12c0 [ 454.657207][ C0] ? ip_local_deliver_finish+0x350/0x350 [ 454.662810][ C0] process_backlog+0xfb5/0x14e0 [ 454.667656][ C0] ? lapic_next_event+0x6e/0xa0 [ 454.672488][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 454.677771][ C0] net_rx_action+0x746/0x1aa0 [ 454.682429][ C0] ? net_tx_action+0xc40/0xc40 [ 454.687176][ C0] __do_softirq+0x311/0x83d [ 454.691655][ C0] asm_call_on_stack+0x12/0x20 [ 454.696387][ C0] [ 454.699303][ C0] do_softirq_own_stack+0x7c/0xa0 [ 454.704300][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 454.709476][ C0] local_bh_enable+0x36/0x40 [ 454.714041][ C0] ip_finish_output2+0x1fee/0x24a0 [ 454.719127][ C0] ? nf_ct_deliver_cached_events+0x403/0x6c0 [ 454.725090][ C0] __ip_finish_output+0xaa7/0xd80 [ 454.730111][ C0] ip_finish_output+0x166/0x410 [ 454.734937][ C0] ip_output+0x593/0x680 [ 454.739157][ C0] ? ip_mc_finish_output+0x6c0/0x6c0 [ 454.744420][ C0] ? ip_finish_output+0x410/0x410 [ 454.749417][ C0] ip_send_skb+0x179/0x360 [ 454.753810][ C0] udp_send_skb+0x1046/0x18b0 [ 454.758474][ C0] udp_sendmsg+0x3bb5/0x4100 [ 454.763061][ C0] ? ip_do_fragment+0x3570/0x3570 [ 454.768064][ C0] ? clear_sched_clock_stable+0xd0/0xe0 [ 454.773597][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.778774][ C0] udpv6_sendmsg+0x1598/0x4940 [ 454.783512][ C0] ? is_module_text_address+0x4d/0x2a0 [ 454.788955][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 454.794039][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 454.799818][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 454.805877][ C0] ? tomoyo_socket_sendmsg_permission+0x41c/0x4a0 [ 454.812266][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.817439][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 454.823223][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 454.829262][ C0] ? inet_send_prepare+0x92/0x600 [ 454.834278][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.839460][ C0] ? udpv6_rcv+0x70/0x70 [ 454.843680][ C0] ? udpv6_rcv+0x70/0x70 [ 454.847898][ C0] inet6_sendmsg+0x276/0x2e0 [ 454.852469][ C0] kernel_sendmsg+0x24a/0x440 [ 454.857126][ C0] sock_no_sendpage+0x235/0x300 [ 454.861956][ C0] ? sock_no_mmap+0x30/0x30 [ 454.866485][ C0] sock_sendpage+0x1e1/0x2c0 [ 454.871189][ C0] pipe_to_sendpage+0x38c/0x4c0 [ 454.876014][ C0] ? sock_fasync+0x250/0x250 [ 454.880584][ C0] __splice_from_pipe+0x565/0xf00 [ 454.885585][ C0] ? generic_splice_sendpage+0x2d0/0x2d0 [ 454.891209][ C0] generic_splice_sendpage+0x1d5/0x2d0 [ 454.896648][ C0] ? iter_file_splice_write+0x1800/0x1800 [ 454.902341][ C0] direct_splice_actor+0x1fd/0x580 [ 454.907430][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 454.912516][ C0] splice_direct_to_actor+0x6b2/0xf50 [ 454.917859][ C0] ? do_splice_direct+0x580/0x580 [ 454.922865][ C0] do_splice_direct+0x342/0x580 [ 454.927708][ C0] do_sendfile+0x101b/0x1d40 [ 454.932294][ C0] __se_compat_sys_sendfile+0x301/0x3c0 [ 454.937815][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 454.942984][ C0] ? __ia32_sys_sendfile64+0x70/0x70 [ 454.948242][ C0] __ia32_compat_sys_sendfile+0x56/0x70 [ 454.953761][ C0] __do_fast_syscall_32+0x2aa/0x400 [ 454.958936][ C0] do_fast_syscall_32+0x6b/0xd0 [ 454.963765][ C0] do_SYSENTER_32+0x73/0x90 [ 454.968239][ C0] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.974538][ C0] RIP: 0023:0xf7f77549 [ 454.978573][ C0] Code: Bad RIP value. [ 454.982613][ C0] RSP: 002b:00000000f5d720cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 454.990995][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 454.998996][ C0] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000000 [ 455.006940][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.014886][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 455.022830][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.030778][ C0] Modules linked in: [ 455.034665][ C0] ---[ end trace ff39d656ec01964f ]--- [ 455.040100][ C0] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 455.046658][ C0] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 ea 03 0a b8 31 c0 e8 81 fc 44 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 32 3d 8c 0c 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 455.066235][ C0] RSP: 0018:ffffb13d80002d38 EFLAGS: 00010046 [ 455.072278][ C0] RAX: 0000000000000002 RBX: 00000000056900c6 RCX: 00000000056900c6 [ 455.080224][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffb13d80002e14 [ 455.088213][ C0] RBP: ffffb13d80002de0 R08: 0000000000000000 R09: ffffa382afc28210 [ 455.096160][ C0] R10: 0000000000000000 R11: ffffffffaee02930 R12: 0000000000000000 [ 455.104103][ C0] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 455.112048][ C0] FS: 0000000000000000(0000) GS:ffffa382afc00000(0063) knlGS:00000000f5d72b40 [ 455.120947][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 455.127503][ C0] CR2: 000000002c220000 CR3: 000000012dff2000 CR4: 00000000001426f0 [ 455.135448][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.143394][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 455.151349][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 455.159272][ C0] Kernel Offset: 0x28a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 455.170939][ C0] Rebooting in 86400 seconds..