, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1324.458561][T30514] IPVS: ftp: loaded support on port[0] = 21 [ 1325.075790][T30522] IPVS: ftp: loaded support on port[0] = 21 22:17:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) 22:17:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1325.818144][T30568] IPVS: ftp: loaded support on port[0] = 21 [ 1326.443697][T30569] IPVS: ftp: loaded support on port[0] = 21 22:17:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) 22:17:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1327.038991][T30620] IPVS: ftp: loaded support on port[0] = 21 [ 1327.680713][T30626] IPVS: ftp: loaded support on port[0] = 21 22:17:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:17:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500), 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1329.401380][T30675] IPVS: ftp: loaded support on port[0] = 21 [ 1331.244750][T30677] IPVS: ftp: loaded support on port[0] = 21 22:17:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:17:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500), 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1332.027627][T30726] IPVS: ftp: loaded support on port[0] = 21 22:17:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500), 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1332.601265][T30725] IPVS: ftp: loaded support on port[0] = 21 22:17:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1333.145573][T30763] IPVS: ftp: loaded support on port[0] = 21 22:17:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1333.756685][T30802] IPVS: ftp: loaded support on port[0] = 21 [ 1334.323763][T30806] IPVS: ftp: loaded support on port[0] = 21 22:17:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:17:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1334.919030][T30854] IPVS: ftp: loaded support on port[0] = 21 [ 1335.480190][T30856] IPVS: ftp: loaded support on port[0] = 21 22:17:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:17:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1336.014838][T30905] IPVS: ftp: loaded support on port[0] = 21 [ 1336.584921][T30910] IPVS: ftp: loaded support on port[0] = 21 22:17:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1337.473653][T30961] IPVS: ftp: loaded support on port[0] = 21 22:17:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) 22:17:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1338.102798][T30972] IPVS: ftp: loaded support on port[0] = 21 22:17:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1338.653886][T31008] IPVS: ftp: loaded support on port[0] = 21 22:17:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1339.280698][T31021] IPVS: ftp: loaded support on port[0] = 21 22:17:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1339.802119][T31045] IPVS: ftp: loaded support on port[0] = 21 [ 1340.335551][T31073] IPVS: ftp: loaded support on port[0] = 21 22:17:58 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:17:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1340.978625][T31118] IPVS: ftp: loaded support on port[0] = 21 22:17:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1341.471453][T31121] IPVS: ftp: loaded support on port[0] = 21 [ 1342.016997][T31152] IPVS: ftp: loaded support on port[0] = 21 22:18:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1343.257426][T31196] IPVS: ftp: loaded support on port[0] = 21 [ 1343.611184][T31197] IPVS: ftp: loaded support on port[0] = 21 22:18:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1344.852227][T31247] IPVS: ftp: loaded support on port[0] = 21 [ 1345.307861][T31252] IPVS: ftp: loaded support on port[0] = 21 22:18:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1345.860623][T31298] IPVS: ftp: loaded support on port[0] = 21 22:18:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1346.534224][T31327] IPVS: ftp: loaded support on port[0] = 21 22:18:05 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1347.130418][T31326] IPVS: ftp: loaded support on port[0] = 21 22:18:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1347.713320][T31364] IPVS: ftp: loaded support on port[0] = 21 [ 1348.256856][T31392] IPVS: ftp: loaded support on port[0] = 21 22:18:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1348.831311][T31421] IPVS: ftp: loaded support on port[0] = 21 22:18:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1349.489739][T31455] IPVS: ftp: loaded support on port[0] = 21 [ 1350.066919][T31458] IPVS: ftp: loaded support on port[0] = 21 22:18:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1350.656517][T31507] IPVS: ftp: loaded support on port[0] = 21 [ 1351.218353][T31511] IPVS: ftp: loaded support on port[0] = 21 22:18:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1351.897978][T31559] IPVS: ftp: loaded support on port[0] = 21 [ 1352.394049][T31561] IPVS: ftp: loaded support on port[0] = 21 22:18:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) 22:18:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1353.317011][T31613] IPVS: ftp: loaded support on port[0] = 21 [ 1353.823359][T31614] IPVS: ftp: loaded support on port[0] = 21 22:18:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1354.484016][T31649] IPVS: ftp: loaded support on port[0] = 21 22:18:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) 22:18:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1355.092676][T31685] IPVS: ftp: loaded support on port[0] = 21 22:18:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) [ 1355.718178][T31706] IPVS: ftp: loaded support on port[0] = 21 [ 1356.299714][T31734] IPVS: ftp: loaded support on port[0] = 21 22:18:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1357.010229][T31758] IPVS: ftp: loaded support on port[0] = 21 22:18:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) 22:18:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1357.832620][T31797] IPVS: ftp: loaded support on port[0] = 21 22:18:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1358.327481][T31801] IPVS: ftp: loaded support on port[0] = 21 22:18:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1358.909771][T31831] IPVS: ftp: loaded support on port[0] = 21 [ 1359.481142][T31866] IPVS: ftp: loaded support on port[0] = 21 22:18:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1360.395681][T31904] IPVS: ftp: loaded support on port[0] = 21 [ 1360.877149][T31902] IPVS: ftp: loaded support on port[0] = 21 22:18:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:18:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1361.710052][T31954] IPVS: ftp: loaded support on port[0] = 21 [ 1362.153560][T31955] IPVS: ftp: loaded support on port[0] = 21 22:18:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1363.081671][T32009] IPVS: ftp: loaded support on port[0] = 21 22:18:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1363.675211][T32035] IPVS: ftp: loaded support on port[0] = 21 22:18:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1364.304333][T32062] IPVS: ftp: loaded support on port[0] = 21 [ 1364.545220][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 22:18:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) [ 1364.981829][T32088] IPVS: ftp: loaded support on port[0] = 21 22:18:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) [ 1365.604813][T32114] IPVS: ftp: loaded support on port[0] = 21 22:18:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) [ 1366.231266][T32140] IPVS: ftp: loaded support on port[0] = 21 22:18:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1366.889790][T32166] IPVS: ftp: loaded support on port[0] = 21 22:18:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1367.496815][T32192] IPVS: ftp: loaded support on port[0] = 21 22:18:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, ' f5', "ec4451175908eec4ca8f1b27b0053a77a56a03bef4e5619f104a9eb6aaa19179fbbc61a4449121cbc80672889758dd6b302bee0ecf3fe6af2d9b49a053b2e97e5899c28c79f43578b805a0f18399d55b631e728366eeed614aa25de113a0cf64e56bb3883ba3051b7139439771a283eaead6a79adbb19792349cd9ea02080d68ab93b0510d58638039b48e7ae235ff727185470c8fa36c96abd9cf827d7cf178e0eabe526a0b5c1dba4af2461517054c319eefbc7ea598b4411b8380b3b275ee90497d28bb4104ad76ce23d4d15e61c723590f7b57732d1741e7c65e4427afbde9a6ea07b9d81fb05fee082ba3770e0841edec663fd10be718d509d738b72e21"}}, 0x110) pipe2(0x0, 0x0) [ 1368.363326][T32218] IPVS: ftp: loaded support on port[0] = 21 22:19:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 22:19:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:30 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:30 executing program 4: r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 22:19:30 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:19:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x3e) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) [ 1432.084315][T32258] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 0, id = 0 [ 1432.239739][T32252] IPVS: ftp: loaded support on port[0] = 21 [ 1432.320980][T32262] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 0, id = 0 [ 1432.370901][T32264] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 0, id = 0 22:19:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000c80)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_CROP(r0, 0xc0405619, &(0x7f0000000480)) 22:19:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x1f, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 22:19:31 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="24000000220007031dfffd946f61050002000000054300000000391e421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 22:19:31 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="db0429ee", 0x4}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}], 0x802, 0x48104) [ 1433.531177][T32249] IPVS: ftp: loaded support on port[0] = 21 22:19:32 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000001190500000300480000000a0000003c0001002c0001001400030016f8bad353dad6b8000000000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000000000000108000700000000002c000d0014000500fe80000000000000000000000000000014000400fe8000000000000000000049"], 0xc0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0xa}, 0x0) [ 1433.746779][T32254] IPVS: ftp: loaded support on port[0] = 21 [ 1434.610663][T32256] IPVS: ftp: loaded support on port[0] = 21 22:19:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1435.978751][T32377] IPVS: ftp: loaded support on port[0] = 21 22:19:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:35 executing program 4: mlockall(0x7) mlockall(0x3) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) 22:19:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r1 = epoll_create(0x4000c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4}) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) 22:19:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="2d44000001000000240012800b0001006d616373656300001400028005000b000100000005000a00000000000a000500140000000004000008000a005b5018492a64672eddba80775df6f63714fd9653a95262291adcc584b4c3b88dc832906c745a392150920c8a6167", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) 22:19:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) [ 1436.910881][T32414] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1436.932550][T32414] device batadv0 entered promiscuous mode 22:19:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d0000002b1ecd5d0000000000", @ANYRES32=r4, @ANYBLOB="00000000000000000e0000000c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x675dec18, 0x0) [ 1437.144080][T32414] device batadv0 left promiscuous mode [ 1438.158848][T32420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1438.225676][T32422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:19:36 executing program 0: r0 = socket$unix(0x1, 0x20000000000001, 0x0) r1 = memfd_create(&(0x7f0000000140)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0Y\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xfa\xbf\xf3x\x86\xc2\xa3\t\x008\xb6XA]\xdc\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,R\x96X\x1ae', 0x0) write(r1, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 22:19:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0) 22:19:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x130, 0x118, 0x3e020003, 0x0, 0x118, 0x1c4, 0x1d0, 0x1d0, 0x1c4, 0x1d0, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0xd4, 0x130, 0x0, {}, [@common=@unspec=@physdev={{0x64, 'physdev\x00'}, {'bond_slave_0\x00', {}, 'veth1_macvtap\x00', {}, 0x0, 0x10}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) 22:19:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000001) [ 1439.446912][T32408] IPVS: ftp: loaded support on port[0] = 21 [ 1439.520435][T32442] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic 22:19:38 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0xca65643a6a9330f, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 22:19:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/57, 0x9}, {&(0x7f00000008c0)=""/106, 0x30}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xb00, 0x0) 22:19:40 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write$P9_RSTAT(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 22:19:40 executing program 4: mlockall(0x7) mlockall(0x3) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) 22:19:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f22d8945e555ff6f4a6e96805783cb20a83e02ab4ed41a78fb08c1523e1cca68faeea3f2abf891857dc82916ac140569584d163702e968635fc2e76027cf7f02ad99f24c3663c021f38d27cc5af28a4f57a69f2335b8eabe9b5a4d2dc1dc951ae49ec87938dfdd62359526da0bc296c2fc8e7d38f179613b80c116a4776303408aed0ca784fef8de1255c05b5a28f9358829bedb898fb4db5a9ab950793b755a1cb14bbb488c130ff7f2d8e1f81f2e573c0e953ee6aad52542a8f8a5a66f46ee72e1e4edbcc810a9188", @ANYRES32=r0], 0xa8}, 0x1, 0x0, 0x0, 0x40084}, 0x8051) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, ' f5', "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"}}, 0x110) pipe2(0x0, 0x0) 22:19:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) 22:19:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:41 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="35010000bf6e9140b80700407f00000000010902120001000000000904"], 0x0) 22:19:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1443.872109][ T8501] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1444.263769][ T8501] usb 6-1: New USB device found, idVendor=07b8, idProduct=4000, bcdDevice= 0.7f [ 1444.273568][ T8501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.364772][ T8501] usb 6-1: config 0 descriptor?? [ 1444.639052][ T8501] kaweth 6-1:0.0: Downloading firmware... [ 1444.709587][ T8501] usb 6-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 1444.718879][ T8501] kaweth 6-1:0.0: Firmware request failed [ 1444.727634][ T8501] kaweth 6-1:0.0: Error downloading firmware (-2) [ 1444.735216][ T8501] kaweth: probe of 6-1:0.0 failed with error -5 22:19:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1444.967202][ T8501] usb 6-1: USB disconnect, device number 23 22:19:43 executing program 4: mlockall(0x7) mlockall(0x3) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1445.433092][T32491] IPVS: ftp: loaded support on port[0] = 21 [ 1445.572880][ T8501] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1446.056674][ T8501] usb 6-1: New USB device found, idVendor=07b8, idProduct=4000, bcdDevice= 0.7f [ 1446.066023][ T8501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.080364][ T8501] usb 6-1: config 0 descriptor?? [ 1446.357798][ T8501] kaweth 6-1:0.0: Downloading firmware... [ 1446.364606][ T8501] usb 6-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 1446.373737][ T8501] kaweth 6-1:0.0: Firmware request failed [ 1446.379567][ T8501] kaweth 6-1:0.0: Error downloading firmware (-2) [ 1446.386493][ T8501] kaweth: probe of 6-1:0.0 failed with error -5 [ 1446.496411][ T8501] usb 6-1: USB disconnect, device number 24 22:19:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:46 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="35010000bf6e9140b80700407f00000000010902120001000000000904"], 0x0) 22:19:46 executing program 4: mlockall(0x7) mlockall(0x3) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) 22:19:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1448.972767][T16619] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1449.334508][T16619] usb 6-1: New USB device found, idVendor=07b8, idProduct=4000, bcdDevice= 0.7f [ 1449.343974][T16619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.535475][T16619] usb 6-1: config 0 descriptor?? [ 1449.805497][T16619] kaweth 6-1:0.0: Downloading firmware... [ 1449.812452][T16619] usb 6-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 1449.821386][T16619] kaweth 6-1:0.0: Firmware request failed [ 1449.827454][T16619] kaweth 6-1:0.0: Error downloading firmware (-2) [ 1449.834385][T16619] kaweth: probe of 6-1:0.0 failed with error -5 [ 1449.957890][T16619] usb 6-1: USB disconnect, device number 25 22:19:49 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'security.', 'O;Rq8\xee\x8b\ftM\xcdY\x11J\xd1\xba\xf5\x1e\xf5\x0e\xfeT\x17X\xfdl&0\xd9\xac\xe2\x82\xb9\xca\xe5\xa1j\x0f\xeb\xa5$t\x0f85\xe6\x06q\x91^>\xfc?\x16\xcb\x1ch\xcct\"d\x98\\|x\x15\xdfP\xda\x10\x9e\x1c/\xfb\x19\xdaQ\xbcVP\x1365\xca\xfc\x0f\xc1\xe4\x91\"+\v\xe9\xe1\xd1\xfa\x97e\x06\\\xf0\xe5(.\xd4\x14\xb6;\xe6\xb9\t\x0e\xcb\x9d\x98\x87\xf3\r\xb8\a\xad\x86%?oC%o\xdeuBiI\x8b\v\x14;X\x99kz?\xd4\xb1\xe4\xfb\x8b\xb8\x0e\xe2a,B\x80\x03\\\xa3\xa0\xfd\xa2~\xfc\v{at\xf4\x84\x9e%z\x19\xdft\xc7\x80\xdd\xb4\x8fg\x15n\x84\xafwig\x01\xc4h\xcb+\n\bF%\x81R\xb8\'\a\xfagk>!\xb8\xa1IL\xd6\x8f\xa8\xbf\xd2;\x81\t\x9f\x81-q\x15T\xb5\x1a\xb1\x11\xa9\av\xe9\xf9a\\*\x8b}\xe1\xa7\x04U\x06\xf9UZ\xe8\n\xcef9U\xb0\xa1y\xf7\xcfi\xa9=\xc0s\xd1F\xf4\xfd5\xf98P\xe5w\x14\xe6\x05\x91v~\xd65F\xa2\xb2\xb7U\x16\x88\x8f\xd6\xeb\xa9\x1c\xef\x92\xb5\x9a\xc2\xdac~\x01h\xa4\x95f#Q\x1e\xf9\x1b\xd1t\xb5n?Q/b\xf43Vk\xa3\xf41\xb1\tX<\x1fK\xa3\xc2\x9d\x05\x0f56'}, 0x0, 0x0) 22:19:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205649, &(0x7f0000000000)={0x1b0eb1a2, 0x0, "122577f05880281fa818ffba7bea7f6c48218ae23f6dc9a6e8036b0905d12c76"}) 22:19:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:49 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="35010000bf6e9140b80700407f00000000010902120001000000000904"], 0x0) 22:19:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60202400}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1451.353779][T11705] usb 6-1: new high-speed USB device number 26 using dummy_hcd 22:19:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001a005f0223b3f40700090400020005000010000000ff0000080001007f020001", 0x84) 22:19:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:19:50 executing program 4: r0 = socket$inet(0x10, 0x2000000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)=@ethtool_dump={0x40}}) [ 1451.713478][T11705] usb 6-1: New USB device found, idVendor=07b8, idProduct=4000, bcdDevice= 0.7f [ 1451.722860][T11705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.822740][T11705] usb 6-1: config 0 descriptor?? 22:19:50 executing program 3: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = socket(0x400000000000010, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="000328bd7024b74700fbdb"], 0x14}}, 0x8000) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair(0x0, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x1, 'veth1_to_batadv\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10c1}, 0x8642f7e2e2b69268) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) pivot_root(&(0x7f0000000340)='./file0\x00', 0x0) [ 1452.092309][T11705] kaweth 6-1:0.0: Downloading firmware... [ 1452.102945][T11705] usb 6-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 1452.112378][T11705] kaweth 6-1:0.0: Firmware request failed [ 1452.118230][T11705] kaweth 6-1:0.0: Error downloading firmware (-2) [ 1452.125150][T11705] kaweth: probe of 6-1:0.0 failed with error -5 22:19:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @private1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) [ 1452.420928][T11705] usb 6-1: USB disconnect, device number 26 22:19:51 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 22:19:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="34000000100081eee80000040000edff0f000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r4, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x21}, [{}]}, 0x58) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4}}]}, 0x40}}, 0x0) bind$packet(r4, &(0x7f0000000000)={0x11, 0x10, r7, 0x1, 0x3, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) 22:19:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff, 0x0, 'fo\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00'}, 0x2c) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x0, 0x0) 22:19:51 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="35010000bf6e9140b80700407f00000000010902120001000000000904"], 0x0) 22:19:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000048c0)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000180)="ad", 0x1}], 0x1}, 0x0) recvmsg$can_bcm(r0, &(0x7f00000040c0)={0x0, 0x0, 0x0}, 0x2) shutdown(r0, 0x0) 22:19:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x28, 0x6a, 0x221, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x81000000}]}, 0x28}}, 0x0) [ 1453.516374][T32682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 22:19:52 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) [ 1453.695944][T16619] usb 6-1: new high-speed USB device number 27 using dummy_hcd 22:19:52 executing program 2: r0 = socket(0x25, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast, {[@rr={0x7, 0x3}]}}}}}) 22:19:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, 0x0, 0x0) [ 1454.075444][T16619] usb 6-1: New USB device found, idVendor=07b8, idProduct=4000, bcdDevice= 0.7f [ 1454.084778][T16619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.120801][T16619] usb 6-1: config 0 descriptor?? 22:19:52 executing program 3: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6002, 0x0, 0x76831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4002031, 0xffffffffffffffff, 0x0) [ 1454.402273][T16619] kaweth 6-1:0.0: Downloading firmware... [ 1454.408888][T16619] usb 6-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 1454.418099][T16619] kaweth 6-1:0.0: Firmware request failed [ 1454.424336][T16619] kaweth 6-1:0.0: Error downloading firmware (-2) [ 1454.431097][T16619] kaweth: probe of 6-1:0.0 failed with error -5 22:19:52 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 22:19:53 executing program 1: syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x3, 0x0, 0x0, "000000010865390403030500000000010900000000000000000000005200", "938408b21b7700000d52901512bbc3de", {"695dfb1be5d2a0057a62022a156400", "a329d3a73b8268129e5fa4316a5d8c69"}}}}}}}, 0x0) [ 1454.782932][T16619] usb 6-1: USB disconnect, device number 27 22:19:53 executing program 2: rename(&(0x7f0000000300)='./file1\x00', 0x0) 22:19:53 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xfec0000000000000}}, 0x20) 22:19:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8004551a, &(0x7f0000000180)={0x0, 0x0, "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"}) 22:19:53 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 22:19:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x9}) 22:19:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="4200ffff0000", 0x6) 22:19:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x2c, 0x1, 0x4, 0x1, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x6}]}, 0x2c}}, 0x0) 22:19:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x6f, 0x0, &(0x7f0000000040)=0x300) 22:19:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newnexthop={0x3c, 0x68, 0x209, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x10, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xc, 0x2, 'batadr0\x00'}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}]}, 0x3c}}, 0x0) 22:19:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8008, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010001fff00"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r5, @ANYBLOB="bb"], 0x20}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01093060024003002cfff57b016d2763bd56373780398d537500e5060259a7ffe4ec55fe800000000000005ba514d40808efa000801610002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd000000005300"/108, 0x5ac, 0x4021, 0x0, 0xffffffffffffffc4) 22:19:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000880, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x3075, 0x0, 0x0) 22:19:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 22:19:54 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x401}, 0x5144, 0x0, 0x0, 0x2, 0x3, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x33) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000888, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x1718370e1c40cd28}, 0x11ffffff6) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x2}, 0x6e) 22:19:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 1456.746399][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:19:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000044c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x207a) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x185842, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) write$FUSE_INTERRUPT(r0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(&(0x7f00000020c0), 0x0, 0x4, &(0x7f0000ffc000/0x4000)=nil, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) read$char_raw(r2, &(0x7f0000006c00)=ANY=[], 0x8e9400) 22:19:55 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c", 0x5}], 0x1}, 0x0) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) [ 1457.254136][T32753] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:19:55 executing program 5: r0 = fanotify_init(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000000)={@void, @void, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @private}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x3c) 22:19:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}]}, 0x28}}, 0x0) 22:19:55 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x9, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000140)={r3}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 22:19:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x9, 0x5}) [ 1457.571317][T32760] fuse: Bad value for 'fd' [ 1457.682797][T32759] fuse: Bad value for 'fd' 22:19:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) [ 1458.050002][ T308] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 22:19:56 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d6b000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 22:19:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}}, 0x0) 22:19:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f00000005c0)={{0x2, 0x0, @broadcast}, {0x0, @remote}, 0xa, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 22:19:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000240)=""/90, &(0x7f00000000c0)=0xae) 22:19:57 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) socket(0x15, 0x5, 0x0) 22:19:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 22:19:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x9}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000380)=""/172, 0x36, 0xac, 0x1}, 0x20) 22:19:57 executing program 2: unshare(0xc000400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x204000, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000080)={r0}, 0x10) 22:19:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x44}}, 0x0) 22:19:59 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 22:19:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 22:19:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=',', 0x1, 0x20008040, 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="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", 0x605}, {&(0x7f0000000a80)="c7c440c1d824c0aad600000000000000e438261e25cd530f1e5fa6eda684b86da46224183fec1be8d7577882b7777223efd8bc6f05b10321708c1307000000520e6ff7b1664ff0605de7eb12440c2c572a092d7ccc76223f077af9e63ed0093a7bceb970a536f32834b83c3e6c571924b7c760e1fde522bb612220287686a9db74b57d396833c1a66d1c30227eae900637dd7af744244537092ad3f7f322a538a2f4b5e62950733b062824433f2b380000000000", 0xb4}, {&(0x7f00000000c0)="72c09d4d085952b360ad678cd667792930ea9b6eac334de579ba2361eb0ea1f88e14f79a7c495b19f28d67473ade318856c8a81717d76ae30670ccee7a4cb700fca407e0ddf01f11814381c7cb589700", 0x50}], 0x3}, 0x0) 22:19:59 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d6b000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 22:19:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in6={0xa, 0x4e24, 0x0, @empty}], 0x38) 22:19:59 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000", @ANYBLOB="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"], 0x13c}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000001c0)={0x81, 0x1, 0x77fc34de, 0x7ff, 0xfa8b, 0xb7}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x200, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESDEC]) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, r1, 0x8) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x20, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x800000020005491d, 0x800007f}, 0x0, 0xf, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="0baba02e95c8c0408265", 0xa}], 0x2}, 0x0) [ 1461.199273][ T357] tmpfs: Unknown parameter '18446744073709551615' [ 1461.279808][ T360] NFS: Device name not specified 22:19:59 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) pipe(&(0x7f00000002c0)) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 22:20:00 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x3c1, 0x2, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{}, {0x11}, {}]}, 0xe0) 22:20:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 22:20:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7fff}]}, 0x24}}, 0x0) 22:20:00 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x3c1, 0x2, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{}, {0x11}, {}]}, 0xe0) 22:20:01 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)={[{@jqfmt_vfsold='jqfmt=vfsold'}]}) 22:20:01 executing program 3: r0 = socket(0x10, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @dev={0xfe, 0x80, [0x8, 0x2, 0x3, 0x3, 0xb, 0x4, 0x7, 0x27, 0x3, 0xb, 0x14, 0x8, 0x6]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0x2000, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) write(r0, &(0x7f0000000140)="240000001e005f0204ffffeefffffff8070000000084d700000400"/36, 0x24) 22:20:01 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d6b000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 22:20:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000006c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @mcast2, 0x2}}}, 0x90) 22:20:01 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x3c1, 0x2, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{}, {0x11}, {}]}, 0xe0) 22:20:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x13}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) [ 1463.241210][ T385] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" [ 1463.443908][ T385] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" 22:20:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7fff}]}, 0x24}}, 0x0) 22:20:02 executing program 1: setrlimit(0x7, &(0x7f0000000140)) socket$pppl2tp(0x18, 0x1, 0x1) 22:20:02 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x3c1, 0x2, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{}, {0x11}, {}]}, 0xe0) 22:20:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x0, 0x0}, 0x30) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = socket(0x10, 0x803, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x0, 0x220, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @rand_addr=0x64010100, @rand_addr=0x64010102, 0x0, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 0x0, 0x10, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0x0, 0x9, 0x0, 0xca38, 0x7, 'team_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010100, 0x1}}}, {{@arp={@multicast2, @rand_addr=0x64010102, 0x0, 0xffffff00, 0x0, 0xc, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x9, 0x8000, 0x81, 0x1, 0x6, 'veth1_vlan\x00', 'team0\x00', {}, {0xff}, 0x0, 0x28}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x19, 0x9, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x448) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0xab2e82e793239cb5}, 0xc, &(0x7f0000002440)={&(0x7f00000003c0)={0x6c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) 22:20:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000009840)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:20:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7fff}]}, 0x24}}, 0x0) 22:20:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r2, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0770a47f793f000000ff030000", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 22:20:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab09) 22:20:03 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d6b000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 22:20:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7fff}]}, 0x24}}, 0x0) 22:20:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="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") 22:20:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x200004e20}, 0x1c) listen(r0, 0xfffffb2c) r1 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0xffff}, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) [ 1465.507777][ T428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1465.569687][ T428] device bond1 entered promiscuous mode [ 1465.607775][ T430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1465.841717][ T430] device bond2 entered promiscuous mode [ 1465.864294][ T464] device macvlan2 entered promiscuous mode [ 1465.880820][ T464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1465.895483][ T464] bond2: (slave macvlan2): Enslaving as an active interface with an up link 22:20:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="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") 22:20:04 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x118, 0x1d, 0x0, 0x118, 0x0, 0x1f0, 0x1fc, 0x1fc, 0x1f0, 0x1fc, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf4, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x2}}, @common=@inet=@tcp={{0x2c, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) [ 1466.274781][ T428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1466.334210][ T464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1466.408560][ T464] bond3 (uninitialized): Released all slaves 22:20:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="db2d6ffda3f9d564fd7a073b6978f45ffa4dabcd56cc0f8c8e26ab95486dd4cc98dc15d5541901f6f4dffb8dd486e4593e96f617d3a5d1d7", 0x38}], 0x1}}], 0x1, 0x0) 22:20:05 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x200004e20}, 0x1c) listen(r0, 0xfffffb2c) r1 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0xffff}, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 22:20:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r2, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0770a47f793f000000ff030000", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 22:20:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 22:20:05 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x31, 0xfffffff6, 0x0, 0x8489}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 22:20:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="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") [ 1467.318387][ T520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1467.358830][ T520] device bond3 entered promiscuous mode [ 1467.399288][ T551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1467.437805][ T551] device bond4 entered promiscuous mode [ 1467.475444][ T570] device macvlan3 entered promiscuous mode [ 1467.493231][ T570] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1467.507562][ T570] bond4: (slave macvlan3): Enslaving as an active interface with an up link 22:20:06 executing program 0: add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000280)=[{&(0x7f0000000fc0)="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", 0x19f}, {&(0x7f0000000240)="03175abffb3d8ee0cf775091da682035706807e8eb39383bf8143f9b97730f1360a5e545f1f5d936c96f869e46606e07"}], 0x52, 0x0) 22:20:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="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") [ 1468.351566][ T33] audit: type=1804 audit(1607466006.796:73): pid=601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815800513/syzkaller.p9BHAe/396/bus" dev="sda1" ino=16323 res=1 errno=0 22:20:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r2, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0770a47f793f000000ff030000", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 22:20:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) [ 1468.629434][ T33] audit: type=1804 audit(1607466007.076:74): pid=602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815800513/syzkaller.p9BHAe/396/bus" dev="sda1" ino=16323 res=1 errno=0 22:20:07 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x200004e20}, 0x1c) listen(r0, 0xfffffb2c) r1 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0xffff}, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) [ 1468.952056][ T610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) open$dir(0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1469.105681][ T616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf2, 0x0, &(0x7f0000000080)) [ 1469.279600][ T616] device bond5 entered promiscuous mode [ 1469.307061][ T620] device macvlan4 entered promiscuous mode 22:20:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfdfdffff}) [ 1469.638525][ T619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1469.727010][ T619] device bond6 entered promiscuous mode [ 1469.738036][ T615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 22:20:08 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb", 0x56}, {&(0x7f00000011c0)}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd28", 0xc8}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 22:20:09 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x200004e20}, 0x1c) listen(r0, 0xfffffb2c) r1 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0xffff}, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 22:20:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r2, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0770a47f793f000000ff030000", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 22:20:09 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf2, 0x0, &(0x7f0000000080)) 22:20:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) open$dir(0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1470.898216][ T708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1471.080923][ T720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) [ 1471.180777][ T720] device bond7 entered promiscuous mode [ 1471.207018][ T722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:09 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) [ 1471.577838][ T722] device bond8 entered promiscuous mode [ 1471.598171][ T760] device macvlan4 entered promiscuous mode [ 1471.614182][ T760] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1471.627983][ T760] bond8: (slave macvlan4): Enslaving as an active interface with an up link 22:20:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf2, 0x0, &(0x7f0000000080)) 22:20:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) open$dir(0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:20:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f0000000040)='system.snckprotoname\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write(r0, &(0x7f00000005c0)="75502217f9b5d18c0f80c2864f3cfd037f8866ff8113d026555e67808fc0452b0cc9a95e6b12218aab2dfcf06b220d9657e03942a99a95fd97110ec232d70476a9bf8197b41d7cfbfb4eefd393ea938611531e61b8abe6fbf1783fdb7b6195796b410957de2bc3cc167f8b55db1506422b054a0427c74b85e6017c2cffb8f9a0", 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000180)='./file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1472.404768][ T808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:10 executing program 1: keyctl$KEYCTL_PKEY_DECRYPT(0x15, &(0x7f00000000c0), 0x0, 0x0, 0x0) 22:20:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_delete(r1) poll(0x0, 0x0, 0x204) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(0x0, 0x2) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) 22:20:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf2, 0x0, &(0x7f0000000080)) 22:20:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 22:20:11 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) llistxattr(0x0, &(0x7f0000000440)=""/153, 0x99) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) setregid(0x0, r1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x14c) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x7) 22:20:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) [ 1473.459736][ T836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfac91f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xffe4}], 0x1) open$dir(0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:20:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 22:20:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14}]}}]}, 0x48}}, 0x0) 22:20:12 executing program 1: syz_emit_ethernet(0x3c, &(0x7f0000000100)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "88f435", 0x2, 0x84, 0x0, @local, @private0, {[], "83be"}}}}}, 0x0) 22:20:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv6_delroute={0x13, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH, @RTA_PREF]}, 0x1c}}, 0x0) 22:20:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b24, &(0x7f0000000040)) 22:20:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 22:20:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 22:20:14 executing program 1: syz_emit_ethernet(0x3c, &(0x7f0000000100)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "88f435", 0x2, 0x84, 0x0, @local, @private0, {[], "83be"}}}}}, 0x0) 22:20:14 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x811048, 0x0) lremovexattr(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)=@random={'trusted.', '-\x00'}) 22:20:14 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) 22:20:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b24, &(0x7f0000000040)) 22:20:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 22:20:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14}, 0x14}}, 0x48840) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)='a', 0x1}], 0x1, &(0x7f0000000300)=[@iv={0x18}], 0x18}], 0x1, 0x0) 22:20:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b24, &(0x7f0000000040)) 22:20:14 executing program 1: syz_emit_ethernet(0x3c, &(0x7f0000000100)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "88f435", 0x2, 0x84, 0x0, @local, @private0, {[], "83be"}}}}}, 0x0) 22:20:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup3(r1, r0, 0x0) getpeername$packet(r2, 0x0, 0x0) 22:20:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 22:20:15 executing program 2: mlockall(0x6) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x20005b) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600800000000000000200080002000600ca3f8bca000000003800000000ff00f7ff0a00ffffff1f000200000020000000b50000000100000000000000000001000200e4ff000100000000e4"], 0x78) close(r0) uselib(&(0x7f0000000000)='./file0\x00') 22:20:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b24, &(0x7f0000000040)) 22:20:15 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007051000000000a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:20:15 executing program 1: syz_emit_ethernet(0x3c, &(0x7f0000000100)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "88f435", 0x2, 0x84, 0x0, @local, @private0, {[], "83be"}}}}}, 0x0) 22:20:15 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4609000000000000000000000003000300000000000000000038000000000000000000008000002000010000000000000000000000030000000000003e1ee8991f898c270006"], 0x58) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:20:15 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000040)) [ 1477.350449][ T911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1477.624997][ T911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 22:20:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x84) 22:20:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) 22:20:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900050200000000000000001d0109004d000f"], 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) 22:20:16 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000030003deb0000000020f0ffffff000000600001005c0001000b000100706f6c6963650000480002"], 0x74}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}}) 22:20:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f00000000c0)=ANY=[], 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 22:20:16 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x14, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xd}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xdd84}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:20:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @mlv2_report}}}}}, 0x0) [ 1478.625373][ T947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1478.635045][ T947] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 22:20:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0xfffff9d9, 0x0) [ 1478.923046][ T954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:20:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000380)={0x1, 0x0, [{0xd}]}) [ 1479.141101][ T954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:20:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 22:20:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2062b041}, [@call={0x28, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:20:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) io_setup(0x8, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe42) 22:20:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0000ee"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:20:18 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)) 22:20:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000fb]}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000001000001b9c9adee652cc6e89c120e9c8449a8046faf2bd17378eeac26034db73c933ff9c21f372fc30065cdc94b0b4f0f67778b7363a0cb7cbd84ce3b6c2abdb330c3e4540667e86c0d395820287f0b67b4d34e5775a682fe1580750ce484c25230b859221bb489d6028fad2443e230ad61786c61ff021400b5bbef3856fb82e756b57ecd821f13efe3e6461814f2ce58c7bd58a88c2114037548669a548eff0635377c56c3f0d523399d05e1ec6464155"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:20:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) [ 1480.162381][T11705] usb 4-1: new high-speed USB device number 4 using dummy_hcd 22:20:18 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1}) [ 1480.402330][T11705] usb 4-1: Using ep0 maxpacket: 8 22:20:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) [ 1480.526713][T11705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.537898][T11705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.548058][T11705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.561985][T11705] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 22:20:19 executing program 2: mmap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x8000000000032, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000000c0)) [ 1480.573143][T11705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.938699][T11705] usb 4-1: config 0 descriptor?? 22:20:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b880)={0x9, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:20:19 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1}) 22:20:19 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 22:20:19 executing program 2: mmap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x8000000000032, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000000c0)) 22:20:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) [ 1481.428757][T11705] isku 0003:1E7D:319C.0004: unknown main item tag 0x0 [ 1481.507078][T11705] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1481.670138][T11705] usb 4-1: USB disconnect, device number 4 [ 1482.442116][T11705] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1482.682223][T11705] usb 4-1: Using ep0 maxpacket: 8 [ 1482.802307][T11705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.817169][T11705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.827368][T11705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1482.840573][T11705] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 1482.849963][T11705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.002897][T11705] usb 4-1: config 0 descriptor?? 22:20:21 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@deltfilter={0x30, 0x24, 0xe51ce6a83a21a92f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0xf, 'bpf\x00'}, {0x4, 0x5}}]}, 0x30}, 0x8}, 0x0) 22:20:21 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff58}}], 0x1, 0x0, 0x0) r3 = dup2(r1, r2) r4 = gettid() fcntl$setown(r2, 0x8, r4) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[], 0xd14}}, 0x0) tkill(r0, 0x16) 22:20:21 executing program 2: mmap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x8000000000032, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000000c0)) 22:20:21 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1}) 22:20:21 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 22:20:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) [ 1483.381497][T11705] usbhid 4-1:0.0: can't add hid device: -71 [ 1483.388080][T11705] usbhid: probe of 4-1:0.0 failed with error -71 [ 1483.474371][T11705] usb 4-1: USB disconnect, device number 5 22:20:22 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1}) [ 1483.959236][ T1061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1484.168956][ T1066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:20:22 executing program 2: mmap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x8000000000032, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000000c0)) 22:20:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 22:20:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) [ 1484.538876][ T1056] not chained 20000 origins [ 1484.541822][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1484.541822][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.541822][ T1056] Call Trace: [ 1484.541822][ T1056] dump_stack+0x21c/0x280 [ 1484.541822][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1484.541822][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1484.577124][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1484.582133][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1484.582133][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1484.582133][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1484.582133][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1484.582133][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1484.612045][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1484.612045][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1484.612045][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1484.612045][ T1056] __msan_chain_origin+0x57/0xa0 [ 1484.612045][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1484.612045][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1484.612045][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1484.612045][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1484.612045][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1484.612045][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1484.612045][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1484.612045][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1484.612045][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1484.612045][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1484.612045][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1484.612045][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1484.612045][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1484.702113][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1484.702113][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1484.702113][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1484.702113][ T1056] do_SYSENTER_32+0x73/0x90 [ 1484.702113][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1484.732075][ T1056] RIP: 0023:0xf7fa1549 [ 1484.732075][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1484.732075][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1484.762575][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1484.762575][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1484.762575][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1484.762575][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1484.762575][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1484.762575][ T1056] Uninit was stored to memory at: [ 1484.762575][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1484.762575][ T1056] __msan_chain_origin+0x57/0xa0 [ 1484.762575][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1484.762575][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1484.762575][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1484.762575][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1484.762575][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1484.762575][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1484.762575][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1484.762575][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1484.762575][ T1056] do_SYSENTER_32+0x73/0x90 [ 1484.762575][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1484.762575][ T1056] [ 1484.762575][ T1056] Uninit was stored to memory at: [ 1484.762575][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1484.882344][ T1056] __msan_chain_origin+0x57/0xa0 [ 1484.882344][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1484.882344][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1484.882344][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1484.882344][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1484.882344][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1484.882344][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1484.882344][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1484.882344][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1484.882344][ T1056] do_SYSENTER_32+0x73/0x90 [ 1484.882344][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1484.882344][ T1056] [ 1484.882344][ T1056] Uninit was stored to memory at: [ 1484.882344][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1484.882344][ T1056] __msan_chain_origin+0x57/0xa0 [ 1484.882344][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1484.882344][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1484.972929][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1484.976174][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1484.976174][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1484.976174][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1484.976174][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1484.976174][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1485.002107][ T1056] do_SYSENTER_32+0x73/0x90 [ 1485.002107][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1485.002107][ T1056] [ 1485.002107][ T1056] Uninit was stored to memory at: [ 1485.002107][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1485.002107][ T1056] __msan_chain_origin+0x57/0xa0 [ 1485.002107][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1485.002107][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1485.002107][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1485.002107][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1485.002107][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1485.002107][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1485.002107][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1485.002107][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1485.002107][ T1056] do_SYSENTER_32+0x73/0x90 [ 1485.002107][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1485.002107][ T1056] [ 1485.002107][ T1056] Uninit was stored to memory at: [ 1485.092035][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1485.092035][ T1056] __msan_chain_origin+0x57/0xa0 [ 1485.092035][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1485.092035][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1485.092035][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1485.092035][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1485.122222][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1485.122222][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1485.122222][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1485.137084][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1485.137084][ T1056] do_SYSENTER_32+0x73/0x90 [ 1485.137084][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1485.137084][ T1056] [ 1485.137084][ T1056] Uninit was stored to memory at: [ 1485.137084][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1485.137084][ T1056] __msan_chain_origin+0x57/0xa0 [ 1485.137084][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1485.137084][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1485.137084][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1485.137084][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1485.137084][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1485.137084][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1485.137084][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1485.137084][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1485.137084][ T1056] do_SYSENTER_32+0x73/0x90 [ 1485.137084][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1485.137084][ T1056] [ 1485.137084][ T1056] Uninit was stored to memory at: [ 1485.137084][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1485.137084][ T1056] __msan_chain_origin+0x57/0xa0 [ 1485.137084][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1485.137084][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1485.137084][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1485.137084][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1485.137084][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1485.137084][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1485.137084][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1485.137084][ T1056] do_fast_syscall_32+0x6a/0xc0 22:20:23 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) mount$9p_fd(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1485.137084][ T1056] do_SYSENTER_32+0x73/0x90 [ 1485.137084][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1485.137084][ T1056] [ 1485.137084][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1485.137084][ T1056] do_recvmmsg+0xbc/0x2300 [ 1485.137084][ T1056] do_recvmmsg+0xbc/0x2300 22:20:24 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/168, 0xa8}, {0x0}], 0x2, 0x800000, 0x0) sync_file_range(0xffffffffffffffff, 0x2, 0x7ff, 0x2) 22:20:24 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) umount2(&(0x7f0000000240)='./file0\x00', 0x0) [ 1487.257626][ T1056] not chained 30000 origins [ 1487.261807][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1487.261807][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.281969][ T1056] Call Trace: [ 1487.281969][ T1056] dump_stack+0x21c/0x280 [ 1487.281969][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1487.281969][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1487.281969][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1487.281969][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1487.281969][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1487.281969][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1487.281969][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1487.281969][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1487.281969][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1487.343944][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1487.343944][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1487.343944][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1487.343944][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.343944][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.343944][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.343944][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1487.382875][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1487.382875][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1487.382875][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1487.382875][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1487.382875][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1487.382875][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] RIP: 0023:0xf7fa1549 [ 1487.382875][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1487.382875][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1487.382875][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1487.382875][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1487.382875][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1487.382875][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1487.382875][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1487.382875][ T1056] Uninit was stored to memory at: [ 1487.382875][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1487.382875][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.382875][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.382875][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.382875][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] [ 1487.382875][ T1056] Uninit was stored to memory at: [ 1487.382875][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1487.382875][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.382875][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.382875][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.382875][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] [ 1487.382875][ T1056] Uninit was stored to memory at: [ 1487.382875][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1487.382875][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.382875][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.382875][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.382875][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] [ 1487.382875][ T1056] Uninit was stored to memory at: [ 1487.382875][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1487.382875][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.382875][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.382875][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.382875][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] [ 1487.382875][ T1056] Uninit was stored to memory at: [ 1487.382875][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1487.382875][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.382875][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.382875][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.382875][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] [ 1487.382875][ T1056] Uninit was stored to memory at: [ 1487.382875][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1487.382875][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.382875][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.382875][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.382875][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] [ 1487.382875][ T1056] Uninit was stored to memory at: [ 1487.382875][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1487.382875][ T1056] __msan_chain_origin+0x57/0xa0 [ 1487.382875][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1487.382875][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1487.382875][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1487.382875][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1487.382875][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1487.382875][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1487.382875][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1487.382875][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1487.382875][ T1056] do_SYSENTER_32+0x73/0x90 [ 1487.382875][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1487.382875][ T1056] [ 1487.382875][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1487.382875][ T1056] do_recvmmsg+0xbc/0x2300 [ 1487.382875][ T1056] do_recvmmsg+0xbc/0x2300 [ 1489.508318][ T1056] not chained 40000 origins [ 1489.511858][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1489.511858][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.511858][ T1056] Call Trace: [ 1489.511858][ T1056] dump_stack+0x21c/0x280 [ 1489.511858][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1489.511858][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1489.511858][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1489.511858][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1489.511858][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1489.511858][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1489.580358][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1489.580358][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1489.580358][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1489.580358][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1489.580358][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1489.580358][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1489.580358][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.580358][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.580358][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.580358][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.580358][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1489.580358][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1489.580358][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1489.580358][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1489.580358][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1489.580358][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1489.580358][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.580358][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1489.580358][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1489.580358][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.580358][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.580358][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.580358][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.580358][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.580358][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.580358][ T1056] RIP: 0023:0xf7fa1549 [ 1489.580358][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1489.752342][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1489.752342][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1489.752342][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1489.752342][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1489.752342][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1489.752342][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1489.752342][ T1056] Uninit was stored to memory at: [ 1489.752342][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1489.752342][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.752342][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.752342][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.752342][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.752342][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.752342][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.752342][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.850870][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.850870][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.850870][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.850870][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.850870][ T1056] [ 1489.850870][ T1056] Uninit was stored to memory at: [ 1489.850870][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1489.850870][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.850870][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.850870][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.850870][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.850870][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.910414][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.910414][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.920849][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.920849][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.920849][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.920849][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.920849][ T1056] [ 1489.920849][ T1056] Uninit was stored to memory at: [ 1489.920849][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1489.920849][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.920849][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.920849][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.920849][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.920849][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.920849][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.920849][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.920849][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.920849][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.920849][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.920849][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.920849][ T1056] [ 1489.920849][ T1056] Uninit was stored to memory at: [ 1489.920849][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1489.920849][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.920849][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.920849][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.920849][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.920849][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.920849][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.920849][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.920849][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.920849][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.920849][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.920849][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.920849][ T1056] [ 1489.920849][ T1056] Uninit was stored to memory at: [ 1489.920849][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1489.920849][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.920849][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.920849][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.920849][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.920849][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.920849][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.920849][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.920849][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.920849][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.920849][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.920849][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.920849][ T1056] [ 1489.920849][ T1056] Uninit was stored to memory at: [ 1489.920849][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1489.920849][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.920849][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.920849][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.920849][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.920849][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.920849][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.920849][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.920849][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.920849][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.920849][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.920849][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.920849][ T1056] [ 1489.920849][ T1056] Uninit was stored to memory at: [ 1489.920849][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1489.920849][ T1056] __msan_chain_origin+0x57/0xa0 [ 1489.920849][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1489.920849][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1489.920849][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1489.920849][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1489.920849][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1489.920849][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1489.920849][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1489.920849][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1489.920849][ T1056] do_SYSENTER_32+0x73/0x90 [ 1489.920849][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1489.920849][ T1056] [ 1489.920849][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1489.920849][ T1056] do_recvmmsg+0xbc/0x2300 [ 1489.920849][ T1056] do_recvmmsg+0xbc/0x2300 [ 1492.608270][ T1056] not chained 50000 origins [ 1492.611825][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1492.616942][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.616942][ T1056] Call Trace: [ 1492.616942][ T1056] dump_stack+0x21c/0x280 [ 1492.616942][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1492.616942][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1492.616942][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1492.616942][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1492.616942][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1492.616942][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1492.616942][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1492.616942][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1492.616942][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1492.616942][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1492.616942][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1492.616942][ T1056] __msan_chain_origin+0x57/0xa0 [ 1492.616942][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1492.737139][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1492.737139][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1492.753365][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1492.753365][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1492.753365][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1492.753365][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1492.753365][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1492.753365][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1492.753365][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1492.753365][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1492.753365][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1492.753365][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.753365][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.753365][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1492.753365][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1492.753365][ T1056] do_SYSENTER_32+0x73/0x90 [ 1492.753365][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1492.753365][ T1056] RIP: 0023:0xf7fa1549 [ 1492.753365][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1492.753365][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1492.753365][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1492.753365][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1492.753365][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1492.753365][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1492.753365][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1492.753365][ T1056] Uninit was stored to memory at: [ 1492.753365][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1492.753365][ T1056] __msan_chain_origin+0x57/0xa0 [ 1492.753365][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1492.753365][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1492.753365][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1492.753365][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1492.753365][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.753365][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.753365][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1492.753365][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1492.753365][ T1056] do_SYSENTER_32+0x73/0x90 [ 1492.753365][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1492.753365][ T1056] [ 1492.753365][ T1056] Uninit was stored to memory at: [ 1492.753365][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1492.753365][ T1056] __msan_chain_origin+0x57/0xa0 [ 1492.753365][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1492.753365][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1492.753365][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1492.753365][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1492.753365][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.753365][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.753365][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1492.753365][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1492.753365][ T1056] do_SYSENTER_32+0x73/0x90 [ 1492.753365][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1492.753365][ T1056] [ 1492.753365][ T1056] Uninit was stored to memory at: [ 1492.753365][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1492.753365][ T1056] __msan_chain_origin+0x57/0xa0 [ 1492.753365][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1492.753365][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1492.753365][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1492.753365][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1492.753365][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1492.753365][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1492.753365][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1492.753365][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1492.753365][ T1056] do_SYSENTER_32+0x73/0x90 [ 1492.753365][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1492.753365][ T1056] [ 1492.753365][ T1056] Uninit was stored to memory at: [ 1493.218088][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1493.218088][ T1056] __msan_chain_origin+0x57/0xa0 [ 1493.218088][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1493.218088][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1493.218088][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1493.218088][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1493.218088][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.218088][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.218088][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1493.218088][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1493.218088][ T1056] do_SYSENTER_32+0x73/0x90 [ 1493.218088][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.218088][ T1056] [ 1493.218088][ T1056] Uninit was stored to memory at: [ 1493.218088][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1493.218088][ T1056] __msan_chain_origin+0x57/0xa0 [ 1493.218088][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1493.218088][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1493.218088][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1493.218088][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1493.218088][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.218088][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.218088][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1493.218088][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1493.218088][ T1056] do_SYSENTER_32+0x73/0x90 [ 1493.218088][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.218088][ T1056] [ 1493.218088][ T1056] Uninit was stored to memory at: [ 1493.218088][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1493.218088][ T1056] __msan_chain_origin+0x57/0xa0 [ 1493.218088][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1493.218088][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1493.218088][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1493.218088][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1493.218088][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.218088][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.218088][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1493.218088][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1493.218088][ T1056] do_SYSENTER_32+0x73/0x90 [ 1493.218088][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.218088][ T1056] [ 1493.218088][ T1056] Uninit was stored to memory at: [ 1493.218088][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1493.218088][ T1056] __msan_chain_origin+0x57/0xa0 [ 1493.218088][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1493.218088][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1493.218088][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1493.218088][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1493.218088][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.218088][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.218088][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1493.218088][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1493.218088][ T1056] do_SYSENTER_32+0x73/0x90 [ 1493.218088][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.218088][ T1056] [ 1493.218088][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1493.218088][ T1056] do_recvmmsg+0xbc/0x2300 [ 1493.218088][ T1056] do_recvmmsg+0xbc/0x2300 [ 1493.898644][ T1056] not chained 60000 origins [ 1493.901841][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1493.906502][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.906502][ T1056] Call Trace: [ 1493.906502][ T1056] dump_stack+0x21c/0x280 [ 1493.906502][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1493.942028][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1493.942028][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1493.942028][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1493.942028][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1493.942028][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1493.977157][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1493.977157][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1493.977157][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1493.977157][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1493.977157][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1493.977157][ T1056] __msan_chain_origin+0x57/0xa0 [ 1493.977157][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1493.977157][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1493.977157][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1493.977157][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1493.977157][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1493.977157][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1493.977157][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1493.977157][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1493.977157][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1493.977157][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1493.977157][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1493.977157][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1493.977157][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1493.977157][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1493.977157][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1493.977157][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1493.977157][ T1056] do_SYSENTER_32+0x73/0x90 [ 1493.977157][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1493.977157][ T1056] RIP: 0023:0xf7fa1549 [ 1493.977157][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1494.171977][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1494.171977][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1494.171977][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.171977][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1494.171977][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1494.171977][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1494.171977][ T1056] Uninit was stored to memory at: [ 1494.171977][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1494.171977][ T1056] __msan_chain_origin+0x57/0xa0 [ 1494.171977][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1494.171977][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1494.171977][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1494.171977][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1494.171977][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.171977][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.171977][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1494.171977][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1494.171977][ T1056] do_SYSENTER_32+0x73/0x90 [ 1494.171977][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.171977][ T1056] [ 1494.171977][ T1056] Uninit was stored to memory at: [ 1494.171977][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1494.171977][ T1056] __msan_chain_origin+0x57/0xa0 [ 1494.171977][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1494.171977][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1494.171977][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1494.171977][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1494.171977][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.171977][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.171977][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1494.171977][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1494.171977][ T1056] do_SYSENTER_32+0x73/0x90 [ 1494.171977][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.171977][ T1056] [ 1494.171977][ T1056] Uninit was stored to memory at: [ 1494.171977][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1494.171977][ T1056] __msan_chain_origin+0x57/0xa0 [ 1494.171977][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1494.171977][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1494.171977][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1494.171977][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1494.171977][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.171977][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.171977][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1494.171977][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1494.171977][ T1056] do_SYSENTER_32+0x73/0x90 [ 1494.171977][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.171977][ T1056] [ 1494.171977][ T1056] Uninit was stored to memory at: [ 1494.171977][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1494.171977][ T1056] __msan_chain_origin+0x57/0xa0 [ 1494.171977][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1494.171977][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1494.171977][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1494.171977][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1494.171977][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.171977][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.171977][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1494.171977][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1494.171977][ T1056] do_SYSENTER_32+0x73/0x90 [ 1494.171977][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.171977][ T1056] [ 1494.171977][ T1056] Uninit was stored to memory at: [ 1494.171977][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1494.171977][ T1056] __msan_chain_origin+0x57/0xa0 [ 1494.171977][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1494.171977][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1494.171977][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1494.171977][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1494.171977][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.171977][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.171977][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1494.171977][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1494.171977][ T1056] do_SYSENTER_32+0x73/0x90 [ 1494.171977][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.171977][ T1056] [ 1494.171977][ T1056] Uninit was stored to memory at: [ 1494.171977][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1494.171977][ T1056] __msan_chain_origin+0x57/0xa0 [ 1494.171977][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1494.171977][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1494.171977][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1494.171977][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1494.171977][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.171977][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.171977][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1494.171977][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1494.171977][ T1056] do_SYSENTER_32+0x73/0x90 [ 1494.171977][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.171977][ T1056] [ 1494.171977][ T1056] Uninit was stored to memory at: [ 1494.171977][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1494.171977][ T1056] __msan_chain_origin+0x57/0xa0 [ 1494.171977][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1494.171977][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1494.171977][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1494.171977][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1494.171977][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1494.171977][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1494.171977][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1494.171977][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1494.171977][ T1056] do_SYSENTER_32+0x73/0x90 [ 1494.171977][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1494.171977][ T1056] [ 1494.171977][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1494.171977][ T1056] do_recvmmsg+0xbc/0x2300 [ 1494.171977][ T1056] do_recvmmsg+0xbc/0x2300 [ 1495.246446][ T1056] not chained 70000 origins [ 1495.251834][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1495.251834][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.251834][ T1056] Call Trace: [ 1495.251834][ T1056] dump_stack+0x21c/0x280 [ 1495.251834][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1495.251834][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1495.299755][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1495.299755][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1495.299755][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1495.299755][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1495.299755][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1495.299755][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1495.299755][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1495.299755][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1495.299755][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1495.299755][ T1056] __msan_chain_origin+0x57/0xa0 [ 1495.299755][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1495.299755][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1495.299755][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1495.299755][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1495.299755][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1495.299755][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1495.299755][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1495.299755][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1495.299755][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1495.299755][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1495.299755][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1495.299755][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1495.299755][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.299755][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.299755][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1495.299755][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1495.299755][ T1056] do_SYSENTER_32+0x73/0x90 [ 1495.299755][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.299755][ T1056] RIP: 0023:0xf7fa1549 [ 1495.299755][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1495.299755][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1495.299755][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1495.299755][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1495.299755][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1495.299755][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1495.299755][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1495.299755][ T1056] Uninit was stored to memory at: [ 1495.299755][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1495.299755][ T1056] __msan_chain_origin+0x57/0xa0 [ 1495.299755][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1495.299755][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1495.299755][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1495.299755][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1495.299755][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.299755][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.299755][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1495.299755][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1495.299755][ T1056] do_SYSENTER_32+0x73/0x90 [ 1495.299755][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.299755][ T1056] [ 1495.299755][ T1056] Uninit was stored to memory at: [ 1495.299755][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1495.299755][ T1056] __msan_chain_origin+0x57/0xa0 [ 1495.299755][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1495.299755][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1495.299755][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1495.299755][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1495.299755][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.299755][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.299755][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1495.299755][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1495.299755][ T1056] do_SYSENTER_32+0x73/0x90 [ 1495.299755][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.299755][ T1056] [ 1495.299755][ T1056] Uninit was stored to memory at: [ 1495.299755][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1495.299755][ T1056] __msan_chain_origin+0x57/0xa0 [ 1495.299755][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1495.299755][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1495.299755][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1495.299755][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1495.299755][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.299755][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.299755][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1495.299755][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1495.299755][ T1056] do_SYSENTER_32+0x73/0x90 [ 1495.299755][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.299755][ T1056] [ 1495.299755][ T1056] Uninit was stored to memory at: [ 1495.299755][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1495.299755][ T1056] __msan_chain_origin+0x57/0xa0 [ 1495.299755][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1495.299755][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1495.299755][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1495.299755][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1495.299755][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1495.299755][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1495.299755][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1495.299755][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1495.299755][ T1056] do_SYSENTER_32+0x73/0x90 [ 1495.299755][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1495.299755][ T1056] [ 1495.299755][ T1056] Uninit was stored to memory at: [ 1495.299755][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1495.299755][ T1056] __msan_chain_origin+0x57/0xa0 [ 1495.299755][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1495.299755][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1495.299755][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1495.299755][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.031080][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.031080][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.046257][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.046257][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.046257][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.046257][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.046257][ T1056] [ 1496.046257][ T1056] Uninit was stored to memory at: [ 1496.046257][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.046257][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.046257][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.046257][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.046257][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.046257][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.046257][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.046257][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.046257][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.046257][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.046257][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.046257][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.046257][ T1056] [ 1496.046257][ T1056] Uninit was stored to memory at: [ 1496.046257][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.046257][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.046257][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.046257][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.046257][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.046257][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.046257][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.046257][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.046257][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.046257][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.046257][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.046257][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.046257][ T1056] [ 1496.046257][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1496.046257][ T1056] do_recvmmsg+0xbc/0x2300 [ 1496.046257][ T1056] do_recvmmsg+0xbc/0x2300 [ 1496.701866][ T1056] not chained 80000 origins [ 1496.702696][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1496.702696][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.702696][ T1056] Call Trace: [ 1496.702696][ T1056] dump_stack+0x21c/0x280 [ 1496.702696][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1496.747776][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1496.747776][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1496.747776][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1496.747776][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1496.747776][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1496.747776][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1496.747776][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1496.747776][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1496.747776][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1496.747776][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1496.747776][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1496.747776][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1496.747776][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1496.747776][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1496.747776][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1496.747776][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] RIP: 0023:0xf7fa1549 [ 1496.747776][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1496.747776][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1496.747776][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1496.747776][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1496.747776][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1496.747776][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1496.747776][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1496.747776][ T1056] Uninit was stored to memory at: [ 1496.747776][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] [ 1496.747776][ T1056] Uninit was stored to memory at: [ 1496.747776][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] [ 1496.747776][ T1056] Uninit was stored to memory at: [ 1496.747776][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] [ 1496.747776][ T1056] Uninit was stored to memory at: [ 1496.747776][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] [ 1496.747776][ T1056] Uninit was stored to memory at: [ 1496.747776][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] [ 1496.747776][ T1056] Uninit was stored to memory at: [ 1496.747776][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] [ 1496.747776][ T1056] Uninit was stored to memory at: [ 1496.747776][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1496.747776][ T1056] __msan_chain_origin+0x57/0xa0 [ 1496.747776][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1496.747776][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1496.747776][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1496.747776][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1496.747776][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1496.747776][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1496.747776][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1496.747776][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1496.747776][ T1056] do_SYSENTER_32+0x73/0x90 [ 1496.747776][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1496.747776][ T1056] [ 1496.747776][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1496.747776][ T1056] do_recvmmsg+0xbc/0x2300 [ 1496.747776][ T1056] do_recvmmsg+0xbc/0x2300 [ 1498.123780][ T1056] not chained 90000 origins [ 1498.130992][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1498.131814][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1498.131814][ T1056] Call Trace: [ 1498.131814][ T1056] dump_stack+0x21c/0x280 [ 1498.131814][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1498.131814][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1498.177089][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1498.177089][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1498.177089][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1498.177089][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1498.177089][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1498.177089][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1498.177089][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1498.177089][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1498.177089][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1498.177089][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1498.177089][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1498.177089][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1498.177089][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1498.177089][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1498.177089][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] RIP: 0023:0xf7fa1549 [ 1498.177089][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1498.177089][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1498.177089][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1498.177089][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.177089][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1498.177089][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1498.177089][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1498.177089][ T1056] Uninit was stored to memory at: [ 1498.177089][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] [ 1498.177089][ T1056] Uninit was stored to memory at: [ 1498.177089][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] [ 1498.177089][ T1056] Uninit was stored to memory at: [ 1498.177089][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] [ 1498.177089][ T1056] Uninit was stored to memory at: [ 1498.177089][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] [ 1498.177089][ T1056] Uninit was stored to memory at: [ 1498.177089][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] [ 1498.177089][ T1056] Uninit was stored to memory at: [ 1498.177089][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] [ 1498.177089][ T1056] Uninit was stored to memory at: [ 1498.177089][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1498.177089][ T1056] __msan_chain_origin+0x57/0xa0 [ 1498.177089][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1498.177089][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1498.177089][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1498.177089][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1498.177089][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1498.177089][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1498.177089][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1498.177089][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1498.177089][ T1056] do_SYSENTER_32+0x73/0x90 [ 1498.177089][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1498.177089][ T1056] [ 1498.177089][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1498.177089][ T1056] do_recvmmsg+0xbc/0x2300 [ 1499.215982][ T1056] do_recvmmsg+0xbc/0x2300 [ 1499.679282][ T1056] not chained 100000 origins [ 1499.681849][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1499.681849][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.681849][ T1056] Call Trace: [ 1499.713631][ T1056] dump_stack+0x21c/0x280 [ 1499.713631][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1499.713631][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1499.713631][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1499.713631][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1499.713631][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1499.713631][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1499.713631][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1499.713631][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1499.713631][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1499.713631][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1499.713631][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1499.713631][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1499.713631][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1499.713631][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1499.713631][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1499.713631][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1499.713631][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] RIP: 0023:0xf7fa1549 [ 1499.713631][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1499.713631][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1499.713631][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1499.713631][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.713631][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.713631][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1499.713631][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.713631][ T1056] Uninit was stored to memory at: [ 1499.713631][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] [ 1499.713631][ T1056] Uninit was stored to memory at: [ 1499.713631][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] [ 1499.713631][ T1056] Uninit was stored to memory at: [ 1499.713631][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] [ 1499.713631][ T1056] Uninit was stored to memory at: [ 1499.713631][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] [ 1499.713631][ T1056] Uninit was stored to memory at: [ 1499.713631][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] [ 1499.713631][ T1056] Uninit was stored to memory at: [ 1499.713631][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] [ 1499.713631][ T1056] Uninit was stored to memory at: [ 1499.713631][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1499.713631][ T1056] __msan_chain_origin+0x57/0xa0 [ 1499.713631][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1499.713631][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1499.713631][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1499.713631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1499.713631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1499.713631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1499.713631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1499.713631][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1499.713631][ T1056] do_SYSENTER_32+0x73/0x90 [ 1499.713631][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1499.713631][ T1056] [ 1499.713631][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1499.713631][ T1056] do_recvmmsg+0xbc/0x2300 [ 1499.713631][ T1056] do_recvmmsg+0xbc/0x2300 [ 1501.231847][ T1056] not chained 110000 origins [ 1501.232795][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1501.232795][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.232795][ T1056] Call Trace: [ 1501.232795][ T1056] dump_stack+0x21c/0x280 [ 1501.232795][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1501.232795][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1501.232795][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1501.232795][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1501.232795][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1501.232795][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1501.232795][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1501.232795][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1501.232795][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1501.232795][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1501.232795][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1501.232795][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1501.232795][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1501.232795][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1501.232795][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1501.232795][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1501.232795][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] RIP: 0023:0xf7fa1549 [ 1501.232795][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1501.232795][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1501.232795][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1501.232795][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1501.232795][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1501.232795][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1501.232795][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1501.232795][ T1056] Uninit was stored to memory at: [ 1501.232795][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] [ 1501.232795][ T1056] Uninit was stored to memory at: [ 1501.232795][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] [ 1501.232795][ T1056] Uninit was stored to memory at: [ 1501.232795][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] [ 1501.232795][ T1056] Uninit was stored to memory at: [ 1501.232795][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] [ 1501.232795][ T1056] Uninit was stored to memory at: [ 1501.232795][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] [ 1501.232795][ T1056] Uninit was stored to memory at: [ 1501.232795][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] [ 1501.232795][ T1056] Uninit was stored to memory at: [ 1501.232795][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1501.232795][ T1056] __msan_chain_origin+0x57/0xa0 [ 1501.232795][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1501.232795][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1501.232795][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1501.232795][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1501.232795][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1501.232795][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1501.232795][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1501.232795][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1501.232795][ T1056] do_SYSENTER_32+0x73/0x90 [ 1501.232795][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1501.232795][ T1056] [ 1501.232795][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1501.232795][ T1056] do_recvmmsg+0xbc/0x2300 [ 1501.232795][ T1056] do_recvmmsg+0xbc/0x2300 [ 1502.714411][ T1056] not chained 120000 origins [ 1502.721300][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1502.721872][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.721872][ T1056] Call Trace: [ 1502.721872][ T1056] dump_stack+0x21c/0x280 [ 1502.721872][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1502.721872][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1502.721872][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1502.721872][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1502.786266][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1502.786266][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1502.786266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1502.786266][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1502.786266][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1502.786266][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1502.786266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1502.786266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1502.786266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1502.786266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1502.786266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1502.786266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1502.786266][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1502.786266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1502.786266][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1502.786266][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1502.786266][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1502.786266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1502.786266][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1502.786266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1502.786266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.786266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.786266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1502.786266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1502.786266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1502.786266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.786266][ T1056] RIP: 0023:0xf7fa1549 [ 1502.786266][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1502.786266][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1502.786266][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1502.786266][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1502.786266][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1502.786266][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1502.786266][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1502.786266][ T1056] Uninit was stored to memory at: [ 1502.786266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1502.786266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1502.786266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1502.786266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1502.786266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1502.786266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1502.786266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1502.786266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1502.786266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1502.786266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1502.786266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1502.786266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1502.786266][ T1056] [ 1502.786266][ T1056] Uninit was stored to memory at: [ 1502.786266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1502.786266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1503.212931][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1503.212931][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1503.212931][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1503.212931][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1503.212931][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.212931][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.212931][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1503.212931][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1503.212931][ T1056] do_SYSENTER_32+0x73/0x90 [ 1503.212931][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.212931][ T1056] [ 1503.212931][ T1056] Uninit was stored to memory at: [ 1503.212931][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1503.212931][ T1056] __msan_chain_origin+0x57/0xa0 [ 1503.212931][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1503.212931][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1503.212931][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1503.212931][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1503.212931][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.212931][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.212931][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1503.212931][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1503.212931][ T1056] do_SYSENTER_32+0x73/0x90 [ 1503.212931][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.212931][ T1056] [ 1503.212931][ T1056] Uninit was stored to memory at: [ 1503.212931][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1503.212931][ T1056] __msan_chain_origin+0x57/0xa0 [ 1503.212931][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1503.212931][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1503.212931][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1503.212931][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1503.212931][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.212931][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.212931][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1503.212931][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1503.212931][ T1056] do_SYSENTER_32+0x73/0x90 [ 1503.212931][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.212931][ T1056] [ 1503.212931][ T1056] Uninit was stored to memory at: [ 1503.212931][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1503.212931][ T1056] __msan_chain_origin+0x57/0xa0 [ 1503.212931][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1503.212931][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1503.212931][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1503.212931][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1503.212931][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.212931][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.212931][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1503.212931][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1503.212931][ T1056] do_SYSENTER_32+0x73/0x90 [ 1503.212931][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.212931][ T1056] [ 1503.212931][ T1056] Uninit was stored to memory at: [ 1503.212931][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1503.212931][ T1056] __msan_chain_origin+0x57/0xa0 [ 1503.212931][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1503.212931][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1503.212931][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1503.212931][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1503.212931][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.212931][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.212931][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1503.212931][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1503.212931][ T1056] do_SYSENTER_32+0x73/0x90 [ 1503.212931][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.212931][ T1056] [ 1503.212931][ T1056] Uninit was stored to memory at: [ 1503.212931][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1503.212931][ T1056] __msan_chain_origin+0x57/0xa0 [ 1503.212931][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1503.212931][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1503.212931][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1503.212931][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1503.212931][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1503.212931][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1503.212931][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1503.212931][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1503.212931][ T1056] do_SYSENTER_32+0x73/0x90 [ 1503.212931][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1503.212931][ T1056] [ 1503.212931][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1503.212931][ T1056] do_recvmmsg+0xbc/0x2300 [ 1503.212931][ T1056] do_recvmmsg+0xbc/0x2300 [ 1504.471834][ T1056] not chained 130000 origins [ 1504.473087][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1504.481988][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.502284][ T1056] Call Trace: [ 1504.502284][ T1056] dump_stack+0x21c/0x280 [ 1504.502284][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1504.502284][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1504.502284][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1504.502284][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1504.502284][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1504.502284][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1504.502284][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1504.502284][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1504.502284][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1504.502284][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1504.502284][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1504.502284][ T1056] __msan_chain_origin+0x57/0xa0 [ 1504.502284][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1504.502284][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1504.502284][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1504.502284][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1504.502284][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1504.502284][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1504.502284][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1504.502284][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1504.502284][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1504.502284][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1504.502284][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1504.502284][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1504.502284][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.502284][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.502284][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1504.502284][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1504.502284][ T1056] do_SYSENTER_32+0x73/0x90 [ 1504.502284][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.502284][ T1056] RIP: 0023:0xf7fa1549 [ 1504.502284][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1504.502284][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1504.502284][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1504.502284][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1504.502284][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1504.502284][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1504.502284][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1504.502284][ T1056] Uninit was stored to memory at: [ 1504.502284][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1504.502284][ T1056] __msan_chain_origin+0x57/0xa0 [ 1504.502284][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1504.502284][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1504.502284][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1504.502284][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1504.502284][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1504.502284][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1504.502284][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1504.502284][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1504.502284][ T1056] do_SYSENTER_32+0x73/0x90 [ 1504.502284][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1504.502284][ T1056] [ 1504.502284][ T1056] Uninit was stored to memory at: [ 1504.502284][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1504.502284][ T1056] __msan_chain_origin+0x57/0xa0 [ 1504.502284][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1504.502284][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1504.502284][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1504.502284][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1505.031567][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.031567][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.031567][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1505.031567][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1505.031567][ T1056] do_SYSENTER_32+0x73/0x90 [ 1505.031567][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.031567][ T1056] [ 1505.031567][ T1056] Uninit was stored to memory at: [ 1505.031567][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1505.031567][ T1056] __msan_chain_origin+0x57/0xa0 [ 1505.031567][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1505.031567][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1505.031567][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1505.031567][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1505.132668][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.132668][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.132668][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1505.132668][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1505.132668][ T1056] do_SYSENTER_32+0x73/0x90 [ 1505.132668][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.183789][ T1056] [ 1505.183789][ T1056] Uninit was stored to memory at: [ 1505.183789][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1505.183789][ T1056] __msan_chain_origin+0x57/0xa0 [ 1505.216662][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1505.216662][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1505.216662][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1505.216662][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1505.216662][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.216662][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.216662][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1505.216662][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1505.216662][ T1056] do_SYSENTER_32+0x73/0x90 [ 1505.216662][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.216662][ T1056] [ 1505.216662][ T1056] Uninit was stored to memory at: [ 1505.216662][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1505.216662][ T1056] __msan_chain_origin+0x57/0xa0 [ 1505.216662][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1505.216662][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1505.216662][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1505.216662][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1505.216662][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.216662][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.216662][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1505.216662][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1505.216662][ T1056] do_SYSENTER_32+0x73/0x90 [ 1505.216662][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.216662][ T1056] [ 1505.216662][ T1056] Uninit was stored to memory at: [ 1505.216662][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1505.216662][ T1056] __msan_chain_origin+0x57/0xa0 [ 1505.216662][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1505.216662][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1505.216662][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1505.216662][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1505.216662][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.216662][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.216662][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1505.216662][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1505.216662][ T1056] do_SYSENTER_32+0x73/0x90 [ 1505.216662][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.216662][ T1056] [ 1505.216662][ T1056] Uninit was stored to memory at: [ 1505.216662][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1505.216662][ T1056] __msan_chain_origin+0x57/0xa0 [ 1505.216662][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1505.216662][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1505.216662][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1505.216662][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1505.216662][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1505.216662][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1505.216662][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1505.216662][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1505.216662][ T1056] do_SYSENTER_32+0x73/0x90 [ 1505.216662][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1505.216662][ T1056] [ 1505.216662][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1505.216662][ T1056] do_recvmmsg+0xbc/0x2300 [ 1505.216662][ T1056] do_recvmmsg+0xbc/0x2300 [ 1506.077974][ T1056] not chained 140000 origins [ 1506.081852][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1506.081852][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.081852][ T1056] Call Trace: [ 1506.081852][ T1056] dump_stack+0x21c/0x280 [ 1506.081852][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1506.081852][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1506.081852][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1506.081852][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1506.081852][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1506.164460][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1506.164460][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1506.164460][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1506.164460][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1506.164460][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1506.164460][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1506.164460][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1506.164460][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1506.164460][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1506.164460][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1506.164460][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1506.164460][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] RIP: 0023:0xf7fa1549 [ 1506.164460][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1506.164460][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1506.164460][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1506.164460][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1506.164460][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1506.164460][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1506.164460][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1506.164460][ T1056] Uninit was stored to memory at: [ 1506.164460][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] [ 1506.164460][ T1056] Uninit was stored to memory at: [ 1506.164460][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] [ 1506.164460][ T1056] Uninit was stored to memory at: [ 1506.164460][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] [ 1506.164460][ T1056] Uninit was stored to memory at: [ 1506.164460][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] [ 1506.164460][ T1056] Uninit was stored to memory at: [ 1506.164460][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] [ 1506.164460][ T1056] Uninit was stored to memory at: [ 1506.164460][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] [ 1506.164460][ T1056] Uninit was stored to memory at: [ 1506.164460][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1506.164460][ T1056] __msan_chain_origin+0x57/0xa0 [ 1506.164460][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1506.164460][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1506.164460][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1506.164460][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1506.164460][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1506.164460][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1506.164460][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1506.164460][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1506.164460][ T1056] do_SYSENTER_32+0x73/0x90 [ 1506.164460][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1506.164460][ T1056] [ 1506.164460][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1506.164460][ T1056] do_recvmmsg+0xbc/0x2300 [ 1506.164460][ T1056] do_recvmmsg+0xbc/0x2300 [ 1507.589740][ T1056] not chained 150000 origins [ 1507.591823][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1507.591823][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.605031][ T1056] Call Trace: [ 1507.605031][ T1056] dump_stack+0x21c/0x280 [ 1507.605031][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1507.605031][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1507.605031][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1507.605031][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1507.605031][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1507.605031][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1507.605031][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1507.605031][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1507.605031][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1507.605031][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1507.605031][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1507.605031][ T1056] __msan_chain_origin+0x57/0xa0 [ 1507.605031][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1507.605031][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1507.605031][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1507.605031][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1507.605031][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1507.605031][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1507.605031][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1507.605031][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1507.605031][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1507.605031][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1507.605031][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1507.605031][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1507.605031][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1507.605031][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1507.605031][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1507.605031][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1507.605031][ T1056] do_SYSENTER_32+0x73/0x90 [ 1507.605031][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1507.605031][ T1056] RIP: 0023:0xf7fa1549 [ 1507.605031][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1507.605031][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1507.605031][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1507.605031][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1507.605031][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1507.605031][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1507.605031][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1507.605031][ T1056] Uninit was stored to memory at: [ 1507.999027][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1507.999027][ T1056] __msan_chain_origin+0x57/0xa0 [ 1507.999027][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1507.999027][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1507.999027][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1508.030155][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1508.030155][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.030155][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.030155][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1508.030155][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1508.030155][ T1056] do_SYSENTER_32+0x73/0x90 [ 1508.030155][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.030155][ T1056] [ 1508.030155][ T1056] Uninit was stored to memory at: [ 1508.030155][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1508.030155][ T1056] __msan_chain_origin+0x57/0xa0 [ 1508.030155][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1508.030155][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1508.030155][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1508.030155][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1508.030155][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.030155][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.030155][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1508.030155][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1508.030155][ T1056] do_SYSENTER_32+0x73/0x90 [ 1508.030155][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.030155][ T1056] [ 1508.030155][ T1056] Uninit was stored to memory at: [ 1508.030155][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1508.030155][ T1056] __msan_chain_origin+0x57/0xa0 [ 1508.030155][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1508.030155][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1508.030155][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1508.030155][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1508.030155][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.030155][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.030155][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1508.030155][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1508.030155][ T1056] do_SYSENTER_32+0x73/0x90 [ 1508.030155][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.030155][ T1056] [ 1508.030155][ T1056] Uninit was stored to memory at: [ 1508.030155][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1508.030155][ T1056] __msan_chain_origin+0x57/0xa0 [ 1508.030155][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1508.030155][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1508.030155][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1508.030155][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1508.030155][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.030155][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.030155][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1508.030155][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1508.030155][ T1056] do_SYSENTER_32+0x73/0x90 [ 1508.030155][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.030155][ T1056] [ 1508.030155][ T1056] Uninit was stored to memory at: [ 1508.030155][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1508.030155][ T1056] __msan_chain_origin+0x57/0xa0 [ 1508.030155][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1508.030155][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1508.030155][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1508.030155][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1508.030155][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.030155][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.030155][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1508.030155][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1508.030155][ T1056] do_SYSENTER_32+0x73/0x90 [ 1508.030155][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.030155][ T1056] [ 1508.030155][ T1056] Uninit was stored to memory at: [ 1508.030155][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1508.030155][ T1056] __msan_chain_origin+0x57/0xa0 [ 1508.030155][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1508.030155][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1508.030155][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1508.030155][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1508.030155][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.030155][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.030155][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1508.030155][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1508.030155][ T1056] do_SYSENTER_32+0x73/0x90 [ 1508.652995][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.652995][ T1056] [ 1508.652995][ T1056] Uninit was stored to memory at: [ 1508.652995][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1508.689975][ T1056] __msan_chain_origin+0x57/0xa0 [ 1508.689975][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1508.689975][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1508.689975][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1508.689975][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1508.689975][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1508.689975][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1508.689975][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1508.689975][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1508.689975][ T1056] do_SYSENTER_32+0x73/0x90 [ 1508.689975][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1508.689975][ T1056] [ 1508.689975][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1508.689975][ T1056] do_recvmmsg+0xbc/0x2300 [ 1508.689975][ T1056] do_recvmmsg+0xbc/0x2300 [ 1509.113618][ T1056] not chained 160000 origins [ 1509.121829][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1509.121829][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.121829][ T1056] Call Trace: [ 1509.121829][ T1056] dump_stack+0x21c/0x280 [ 1509.121829][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1509.121829][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1509.121829][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1509.163969][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1509.163969][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1509.163969][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1509.163969][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1509.163969][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1509.163969][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1509.163969][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1509.163969][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1509.163969][ T1056] __msan_chain_origin+0x57/0xa0 [ 1509.163969][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1509.163969][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1509.163969][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1509.163969][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1509.163969][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1509.163969][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1509.294316][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1509.294316][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1509.314399][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1509.314399][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1509.314399][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1509.343709][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1509.343709][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.343709][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.343709][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1509.343709][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1509.343709][ T1056] do_SYSENTER_32+0x73/0x90 [ 1509.343709][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.343709][ T1056] RIP: 0023:0xf7fa1549 [ 1509.343709][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1509.436576][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1509.436576][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1509.436576][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1509.464889][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1509.464889][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1509.464889][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1509.497720][ T1056] Uninit was stored to memory at: [ 1509.497720][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1509.497720][ T1056] __msan_chain_origin+0x57/0xa0 [ 1509.497720][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1509.497720][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1509.497720][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1509.497720][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1509.551960][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.551960][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.551960][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1509.551960][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1509.587528][ T1056] do_SYSENTER_32+0x73/0x90 [ 1509.587528][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.587528][ T1056] [ 1509.587528][ T1056] Uninit was stored to memory at: [ 1509.613092][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1509.613092][ T1056] __msan_chain_origin+0x57/0xa0 [ 1509.613092][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1509.613092][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1509.647635][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1509.647635][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1509.647635][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.672052][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.672052][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1509.672052][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1509.702090][ T1056] do_SYSENTER_32+0x73/0x90 [ 1509.702090][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.702090][ T1056] [ 1509.732572][ T1056] Uninit was stored to memory at: [ 1509.732572][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1509.732572][ T1056] __msan_chain_origin+0x57/0xa0 [ 1509.732572][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1509.732572][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1509.769661][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1509.769661][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1509.769661][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.769661][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.769661][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1509.769661][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1509.769661][ T1056] do_SYSENTER_32+0x73/0x90 [ 1509.769661][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.769661][ T1056] [ 1509.769661][ T1056] Uninit was stored to memory at: [ 1509.769661][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1509.769661][ T1056] __msan_chain_origin+0x57/0xa0 [ 1509.769661][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1509.769661][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1509.769661][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1509.769661][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1509.769661][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.769661][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.769661][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1509.769661][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1509.769661][ T1056] do_SYSENTER_32+0x73/0x90 [ 1509.918432][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1509.918432][ T1056] [ 1509.918432][ T1056] Uninit was stored to memory at: [ 1509.918432][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1509.918432][ T1056] __msan_chain_origin+0x57/0xa0 [ 1509.918432][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1509.918432][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1509.918432][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1509.918432][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1509.918432][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1509.918432][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1509.918432][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.008635][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.008635][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.008635][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.031919][ T1056] [ 1510.031919][ T1056] Uninit was stored to memory at: [ 1510.031919][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.031919][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.031919][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.066402][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.066402][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.066402][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.066402][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.098941][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.098941][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.098941][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.098941][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.122626][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.122626][ T1056] [ 1510.122626][ T1056] Uninit was stored to memory at: [ 1510.122626][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.153573][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.153573][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.153573][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.153573][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.187919][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.187919][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.187919][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.215129][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.215129][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.215129][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.244896][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.244896][ T1056] [ 1510.244896][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1510.244896][ T1056] do_recvmmsg+0xbc/0x2300 [ 1510.279371][ T1056] do_recvmmsg+0xbc/0x2300 [ 1510.651862][ T1056] not chained 170000 origins [ 1510.651862][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1510.651862][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.674018][ T1056] Call Trace: [ 1510.674018][ T1056] dump_stack+0x21c/0x280 [ 1510.674018][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1510.674018][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1510.674018][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1510.674018][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1510.674018][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1510.674018][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1510.674018][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1510.674018][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1510.674018][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1510.674018][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1510.674018][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1510.674018][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1510.674018][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1510.674018][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1510.674018][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1510.674018][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1510.674018][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] RIP: 0023:0xf7fa1549 [ 1510.674018][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1510.674018][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1510.674018][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1510.674018][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1510.674018][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1510.674018][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1510.674018][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1510.674018][ T1056] Uninit was stored to memory at: [ 1510.674018][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] [ 1510.674018][ T1056] Uninit was stored to memory at: [ 1510.674018][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] [ 1510.674018][ T1056] Uninit was stored to memory at: [ 1510.674018][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] [ 1510.674018][ T1056] Uninit was stored to memory at: [ 1510.674018][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] [ 1510.674018][ T1056] Uninit was stored to memory at: [ 1510.674018][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] [ 1510.674018][ T1056] Uninit was stored to memory at: [ 1510.674018][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] [ 1510.674018][ T1056] Uninit was stored to memory at: [ 1510.674018][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1510.674018][ T1056] __msan_chain_origin+0x57/0xa0 [ 1510.674018][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1510.674018][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1510.674018][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1510.674018][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1510.674018][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1510.674018][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1510.674018][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1510.674018][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1510.674018][ T1056] do_SYSENTER_32+0x73/0x90 [ 1510.674018][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1510.674018][ T1056] [ 1510.674018][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1510.674018][ T1056] do_recvmmsg+0xbc/0x2300 [ 1510.674018][ T1056] do_recvmmsg+0xbc/0x2300 [ 1512.341813][ T1056] not chained 180000 origins [ 1512.341813][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1512.341813][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.341813][ T1056] Call Trace: [ 1512.341813][ T1056] dump_stack+0x21c/0x280 [ 1512.341813][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1512.341813][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1512.341813][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1512.341813][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1512.341813][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1512.341813][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1512.341813][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1512.341813][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1512.341813][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1512.341813][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1512.341813][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1512.341813][ T1056] __msan_chain_origin+0x57/0xa0 [ 1512.341813][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1512.341813][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1512.341813][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1512.341813][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1512.341813][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1512.341813][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1512.341813][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1512.341813][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1512.341813][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1512.341813][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1512.341813][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1512.341813][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1512.341813][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.341813][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.341813][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1512.341813][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1512.341813][ T1056] do_SYSENTER_32+0x73/0x90 [ 1512.341813][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.341813][ T1056] RIP: 0023:0xf7fa1549 [ 1512.341813][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1512.341813][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1512.341813][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1512.341813][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1512.341813][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1512.341813][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1512.341813][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1512.341813][ T1056] Uninit was stored to memory at: [ 1512.341813][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1512.341813][ T1056] __msan_chain_origin+0x57/0xa0 [ 1512.341813][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1512.341813][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1512.341813][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1512.341813][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1512.341813][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.341813][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.341813][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1512.341813][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1512.341813][ T1056] do_SYSENTER_32+0x73/0x90 [ 1512.341813][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.874490][ T1056] [ 1512.874490][ T1056] Uninit was stored to memory at: [ 1512.874490][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1512.874490][ T1056] __msan_chain_origin+0x57/0xa0 [ 1512.874490][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1512.874490][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1512.874490][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1512.874490][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1512.874490][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.874490][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.874490][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1512.874490][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1512.874490][ T1056] do_SYSENTER_32+0x73/0x90 [ 1512.874490][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.874490][ T1056] [ 1512.874490][ T1056] Uninit was stored to memory at: [ 1512.874490][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1512.874490][ T1056] __msan_chain_origin+0x57/0xa0 [ 1512.874490][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1512.874490][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1512.874490][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1512.874490][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1512.874490][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.874490][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.874490][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1512.874490][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1512.874490][ T1056] do_SYSENTER_32+0x73/0x90 [ 1512.874490][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.874490][ T1056] [ 1512.874490][ T1056] Uninit was stored to memory at: [ 1512.874490][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1512.874490][ T1056] __msan_chain_origin+0x57/0xa0 [ 1512.874490][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1512.874490][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1512.874490][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1512.874490][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1512.874490][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1512.874490][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1512.874490][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1512.874490][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1512.874490][ T1056] do_SYSENTER_32+0x73/0x90 [ 1512.874490][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1512.874490][ T1056] [ 1512.874490][ T1056] Uninit was stored to memory at: [ 1512.874490][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1512.874490][ T1056] __msan_chain_origin+0x57/0xa0 [ 1512.874490][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1512.874490][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1513.297420][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1513.297420][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1513.297420][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.297420][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.297420][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1513.297420][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1513.297420][ T1056] do_SYSENTER_32+0x73/0x90 [ 1513.297420][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.297420][ T1056] [ 1513.297420][ T1056] Uninit was stored to memory at: [ 1513.297420][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1513.297420][ T1056] __msan_chain_origin+0x57/0xa0 [ 1513.297420][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1513.297420][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1513.297420][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1513.297420][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1513.297420][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.297420][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.297420][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1513.452147][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1513.452147][ T1056] do_SYSENTER_32+0x73/0x90 [ 1513.452147][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.452147][ T1056] [ 1513.452147][ T1056] Uninit was stored to memory at: [ 1513.452147][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1513.503108][ T1056] __msan_chain_origin+0x57/0xa0 [ 1513.503108][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1513.503108][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1513.503108][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1513.503108][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1513.503108][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.503108][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.503108][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1513.503108][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1513.503108][ T1056] do_SYSENTER_32+0x73/0x90 [ 1513.503108][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.503108][ T1056] [ 1513.503108][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1513.503108][ T1056] do_recvmmsg+0xbc/0x2300 [ 1513.503108][ T1056] do_recvmmsg+0xbc/0x2300 [ 1513.921055][ T1056] not chained 190000 origins [ 1513.921810][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1513.921810][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1513.921810][ T1056] Call Trace: [ 1513.921810][ T1056] dump_stack+0x21c/0x280 [ 1513.921810][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1513.921810][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1513.921810][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1513.921810][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1513.921810][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1513.921810][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1513.921810][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1513.921810][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1513.921810][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1513.921810][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1513.921810][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1513.921810][ T1056] __msan_chain_origin+0x57/0xa0 [ 1513.921810][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1513.921810][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1513.921810][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1513.921810][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1513.921810][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1513.921810][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1513.921810][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1513.921810][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1513.921810][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1513.921810][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1513.921810][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1513.921810][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1513.921810][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1513.921810][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1513.921810][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1513.921810][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1513.921810][ T1056] do_SYSENTER_32+0x73/0x90 [ 1513.921810][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1513.921810][ T1056] RIP: 0023:0xf7fa1549 [ 1513.921810][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1514.251957][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1514.272243][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1514.272243][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1514.272243][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1514.272243][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1514.272243][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.272243][ T1056] Uninit was stored to memory at: [ 1514.272243][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1514.272243][ T1056] __msan_chain_origin+0x57/0xa0 [ 1514.272243][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1514.272243][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1514.272243][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1514.272243][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1514.272243][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.272243][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.272243][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1514.272243][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1514.272243][ T1056] do_SYSENTER_32+0x73/0x90 [ 1514.272243][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.272243][ T1056] [ 1514.272243][ T1056] Uninit was stored to memory at: [ 1514.272243][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1514.272243][ T1056] __msan_chain_origin+0x57/0xa0 [ 1514.272243][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1514.272243][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1514.272243][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1514.272243][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1514.272243][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.272243][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.272243][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1514.272243][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1514.272243][ T1056] do_SYSENTER_32+0x73/0x90 [ 1514.272243][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.272243][ T1056] [ 1514.272243][ T1056] Uninit was stored to memory at: [ 1514.272243][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1514.272243][ T1056] __msan_chain_origin+0x57/0xa0 [ 1514.272243][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1514.272243][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1514.272243][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1514.272243][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1514.272243][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.272243][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.272243][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1514.272243][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1514.272243][ T1056] do_SYSENTER_32+0x73/0x90 [ 1514.272243][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.272243][ T1056] [ 1514.272243][ T1056] Uninit was stored to memory at: [ 1514.272243][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1514.272243][ T1056] __msan_chain_origin+0x57/0xa0 [ 1514.272243][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1514.272243][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1514.272243][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1514.272243][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1514.272243][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.272243][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.272243][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1514.272243][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1514.272243][ T1056] do_SYSENTER_32+0x73/0x90 [ 1514.272243][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.272243][ T1056] [ 1514.272243][ T1056] Uninit was stored to memory at: [ 1514.272243][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1514.272243][ T1056] __msan_chain_origin+0x57/0xa0 [ 1514.272243][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1514.272243][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1514.272243][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1514.272243][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1514.272243][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.272243][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.272243][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1514.272243][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1514.272243][ T1056] do_SYSENTER_32+0x73/0x90 [ 1514.272243][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.272243][ T1056] [ 1514.272243][ T1056] Uninit was stored to memory at: [ 1514.272243][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1514.272243][ T1056] __msan_chain_origin+0x57/0xa0 [ 1514.272243][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1514.272243][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1514.272243][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1514.272243][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1514.272243][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.272243][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.272243][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1514.272243][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1514.272243][ T1056] do_SYSENTER_32+0x73/0x90 [ 1514.272243][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.272243][ T1056] [ 1514.272243][ T1056] Uninit was stored to memory at: [ 1514.272243][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1514.272243][ T1056] __msan_chain_origin+0x57/0xa0 [ 1514.272243][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1514.272243][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1514.272243][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1514.272243][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1514.272243][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1514.272243][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1514.272243][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1514.272243][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1514.272243][ T1056] do_SYSENTER_32+0x73/0x90 [ 1514.272243][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1514.272243][ T1056] [ 1514.272243][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1514.272243][ T1056] do_recvmmsg+0xbc/0x2300 [ 1514.272243][ T1056] do_recvmmsg+0xbc/0x2300 [ 1515.500285][ T1056] not chained 200000 origins [ 1515.501845][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1515.501845][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.501845][ T1056] Call Trace: [ 1515.501845][ T1056] dump_stack+0x21c/0x280 [ 1515.501845][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1515.501845][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1515.501845][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1515.501845][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1515.501845][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1515.501845][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1515.590074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1515.590074][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1515.590074][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1515.590074][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1515.590074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1515.590074][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1515.590074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1515.590074][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1515.590074][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1515.590074][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1515.590074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] RIP: 0023:0xf7fa1549 [ 1515.590074][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1515.590074][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1515.590074][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1515.590074][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1515.590074][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1515.590074][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1515.590074][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1515.590074][ T1056] Uninit was stored to memory at: [ 1515.590074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] [ 1515.590074][ T1056] Uninit was stored to memory at: [ 1515.590074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] [ 1515.590074][ T1056] Uninit was stored to memory at: [ 1515.590074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] [ 1515.590074][ T1056] Uninit was stored to memory at: [ 1515.590074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] [ 1515.590074][ T1056] Uninit was stored to memory at: [ 1515.590074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] [ 1515.590074][ T1056] Uninit was stored to memory at: [ 1515.590074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] [ 1515.590074][ T1056] Uninit was stored to memory at: [ 1515.590074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1515.590074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1515.590074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1515.590074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1515.590074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1515.590074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1515.590074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1515.590074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1515.590074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1515.590074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1515.590074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1515.590074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1515.590074][ T1056] [ 1515.590074][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1515.590074][ T1056] do_recvmmsg+0xbc/0x2300 [ 1515.590074][ T1056] do_recvmmsg+0xbc/0x2300 [ 1517.079433][ T1056] not chained 210000 origins [ 1517.081833][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1517.081833][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1517.081833][ T1056] Call Trace: [ 1517.109752][ T1056] dump_stack+0x21c/0x280 [ 1517.122217][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1517.122217][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1517.122217][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1517.122217][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1517.122217][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1517.122217][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1517.122217][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1517.122217][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1517.122217][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1517.197820][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1517.197820][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1517.197820][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.228150][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.228150][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.228150][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.252544][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1517.252544][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1517.252544][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1517.252544][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1517.287846][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1517.296465][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1517.296465][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] RIP: 0023:0xf7fa1549 [ 1517.296465][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1517.296465][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1517.296465][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1517.296465][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1517.296465][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1517.296465][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1517.296465][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1517.296465][ T1056] Uninit was stored to memory at: [ 1517.296465][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1517.296465][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.296465][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.296465][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.296465][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] [ 1517.296465][ T1056] Uninit was stored to memory at: [ 1517.296465][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1517.296465][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.296465][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.296465][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.296465][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] [ 1517.296465][ T1056] Uninit was stored to memory at: [ 1517.296465][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1517.296465][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.296465][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.296465][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.296465][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] [ 1517.296465][ T1056] Uninit was stored to memory at: [ 1517.296465][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1517.296465][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.296465][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.296465][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.296465][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] [ 1517.296465][ T1056] Uninit was stored to memory at: [ 1517.296465][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1517.296465][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.296465][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.296465][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.296465][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] [ 1517.296465][ T1056] Uninit was stored to memory at: [ 1517.296465][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1517.296465][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.296465][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.296465][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.296465][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] [ 1517.296465][ T1056] Uninit was stored to memory at: [ 1517.296465][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1517.296465][ T1056] __msan_chain_origin+0x57/0xa0 [ 1517.296465][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1517.296465][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1517.296465][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1517.296465][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1517.296465][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1517.296465][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1517.296465][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1517.296465][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1517.296465][ T1056] do_SYSENTER_32+0x73/0x90 [ 1517.296465][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1517.296465][ T1056] [ 1517.296465][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1517.296465][ T1056] do_recvmmsg+0xbc/0x2300 [ 1517.296465][ T1056] do_recvmmsg+0xbc/0x2300 [ 1518.669811][ T1056] not chained 220000 origins [ 1518.671852][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1518.671852][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.671852][ T1056] Call Trace: [ 1518.671852][ T1056] dump_stack+0x21c/0x280 [ 1518.671852][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1518.671852][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1518.671852][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1518.671852][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1518.671852][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1518.671852][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1518.759698][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1518.759698][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1518.759698][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1518.759698][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1518.759698][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1518.759698][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1518.759698][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1518.759698][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1518.759698][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1518.759698][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1518.759698][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] RIP: 0023:0xf7fa1549 [ 1518.759698][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1518.759698][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1518.759698][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1518.759698][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1518.759698][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1518.759698][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1518.759698][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1518.759698][ T1056] Uninit was stored to memory at: [ 1518.759698][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] [ 1518.759698][ T1056] Uninit was stored to memory at: [ 1518.759698][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] [ 1518.759698][ T1056] Uninit was stored to memory at: [ 1518.759698][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] [ 1518.759698][ T1056] Uninit was stored to memory at: [ 1518.759698][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] [ 1518.759698][ T1056] Uninit was stored to memory at: [ 1518.759698][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] [ 1518.759698][ T1056] Uninit was stored to memory at: [ 1518.759698][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] [ 1518.759698][ T1056] Uninit was stored to memory at: [ 1518.759698][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1518.759698][ T1056] __msan_chain_origin+0x57/0xa0 [ 1518.759698][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1518.759698][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1518.759698][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1518.759698][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1518.759698][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1518.759698][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1518.759698][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1518.759698][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1518.759698][ T1056] do_SYSENTER_32+0x73/0x90 [ 1518.759698][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1518.759698][ T1056] [ 1518.759698][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1518.759698][ T1056] do_recvmmsg+0xbc/0x2300 [ 1518.759698][ T1056] do_recvmmsg+0xbc/0x2300 [ 1520.289977][ T1056] not chained 230000 origins [ 1520.291847][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1520.299427][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.299427][ T1056] Call Trace: [ 1520.299427][ T1056] dump_stack+0x21c/0x280 [ 1520.299427][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1520.299427][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1520.299427][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1520.299427][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1520.299427][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1520.299427][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1520.299427][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1520.299427][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1520.299427][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1520.299427][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1520.299427][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1520.299427][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1520.299427][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1520.299427][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1520.299427][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1520.299427][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1520.299427][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] RIP: 0023:0xf7fa1549 [ 1520.299427][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1520.299427][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1520.299427][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1520.299427][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1520.299427][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1520.299427][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1520.299427][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1520.299427][ T1056] Uninit was stored to memory at: [ 1520.299427][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] [ 1520.299427][ T1056] Uninit was stored to memory at: [ 1520.299427][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] [ 1520.299427][ T1056] Uninit was stored to memory at: [ 1520.299427][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] [ 1520.299427][ T1056] Uninit was stored to memory at: [ 1520.299427][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] [ 1520.299427][ T1056] Uninit was stored to memory at: [ 1520.299427][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] [ 1520.299427][ T1056] Uninit was stored to memory at: [ 1520.299427][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] [ 1520.299427][ T1056] Uninit was stored to memory at: [ 1520.299427][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1520.299427][ T1056] __msan_chain_origin+0x57/0xa0 [ 1520.299427][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1520.299427][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1520.299427][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1520.299427][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1520.299427][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1520.299427][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1520.299427][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1520.299427][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1520.299427][ T1056] do_SYSENTER_32+0x73/0x90 [ 1520.299427][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1520.299427][ T1056] [ 1520.299427][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1520.299427][ T1056] do_recvmmsg+0xbc/0x2300 [ 1520.299427][ T1056] do_recvmmsg+0xbc/0x2300 [ 1521.850048][ T1056] not chained 240000 origins [ 1521.851855][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1521.851855][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.851855][ T1056] Call Trace: [ 1521.851855][ T1056] dump_stack+0x21c/0x280 [ 1521.851855][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1521.851855][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1521.851855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1521.851855][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1521.851855][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1521.851855][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1521.851855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1521.851855][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1521.851855][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1521.851855][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1521.851855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1521.851855][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1521.851855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1521.851855][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1521.851855][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1521.851855][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1521.851855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] RIP: 0023:0xf7fa1549 [ 1521.851855][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1521.851855][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1521.851855][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1521.851855][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1521.851855][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1521.851855][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1521.851855][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1521.851855][ T1056] Uninit was stored to memory at: [ 1521.851855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] [ 1521.851855][ T1056] Uninit was stored to memory at: [ 1521.851855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] [ 1521.851855][ T1056] Uninit was stored to memory at: [ 1521.851855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] [ 1521.851855][ T1056] Uninit was stored to memory at: [ 1521.851855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] [ 1521.851855][ T1056] Uninit was stored to memory at: [ 1521.851855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] [ 1521.851855][ T1056] Uninit was stored to memory at: [ 1521.851855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] [ 1521.851855][ T1056] Uninit was stored to memory at: [ 1521.851855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1521.851855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1521.851855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1521.851855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1521.851855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1521.851855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1521.851855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1521.851855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1521.851855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1521.851855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1521.851855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1521.851855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1521.851855][ T1056] [ 1521.851855][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1521.851855][ T1056] do_recvmmsg+0xbc/0x2300 [ 1521.851855][ T1056] do_recvmmsg+0xbc/0x2300 [ 1523.421864][ T1056] not chained 250000 origins [ 1523.421864][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1523.421864][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1523.421864][ T1056] Call Trace: [ 1523.421864][ T1056] dump_stack+0x21c/0x280 [ 1523.421864][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1523.475347][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1523.475347][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1523.475347][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1523.475347][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1523.475347][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1523.475347][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1523.475347][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1523.475347][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1523.475347][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1523.475347][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1523.475347][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1523.475347][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1523.475347][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1523.475347][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1523.475347][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1523.475347][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] RIP: 0023:0xf7fa1549 [ 1523.475347][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1523.475347][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1523.475347][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1523.475347][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1523.475347][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1523.475347][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1523.475347][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1523.475347][ T1056] Uninit was stored to memory at: [ 1523.475347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] [ 1523.475347][ T1056] Uninit was stored to memory at: [ 1523.475347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] [ 1523.475347][ T1056] Uninit was stored to memory at: [ 1523.475347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] [ 1523.475347][ T1056] Uninit was stored to memory at: [ 1523.475347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] [ 1523.475347][ T1056] Uninit was stored to memory at: [ 1523.475347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] [ 1523.475347][ T1056] Uninit was stored to memory at: [ 1523.475347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] [ 1523.475347][ T1056] Uninit was stored to memory at: [ 1523.475347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1523.475347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1523.475347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1523.475347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1523.475347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1523.475347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1523.475347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1523.475347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1523.475347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1523.475347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1523.475347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1523.475347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1523.475347][ T1056] [ 1523.475347][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1523.475347][ T1056] do_recvmmsg+0xbc/0x2300 [ 1523.475347][ T1056] do_recvmmsg+0xbc/0x2300 [ 1525.001815][ T1056] not chained 260000 origins [ 1525.007145][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1525.007145][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.007145][ T1056] Call Trace: [ 1525.007145][ T1056] dump_stack+0x21c/0x280 [ 1525.007145][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1525.007145][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1525.007145][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1525.007145][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1525.071398][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1525.071398][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1525.071398][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1525.071398][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1525.071398][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1525.071398][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1525.071398][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1525.071398][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.071398][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.071398][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.071398][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.071398][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1525.071398][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1525.071398][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1525.071398][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1525.071398][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1525.071398][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1525.203323][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.203323][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1525.203323][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1525.203323][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.203323][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.203323][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.203323][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.203323][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.203323][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.203323][ T1056] RIP: 0023:0xf7fa1549 [ 1525.203323][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1525.203323][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1525.203323][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1525.203323][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1525.203323][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1525.203323][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1525.203323][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1525.203323][ T1056] Uninit was stored to memory at: [ 1525.376964][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1525.376964][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.376964][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.376964][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.376964][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.376964][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.376964][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.376964][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.376964][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.376964][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.376964][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.376964][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.376964][ T1056] [ 1525.376964][ T1056] Uninit was stored to memory at: [ 1525.376964][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1525.376964][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.376964][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.376964][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.376964][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.376964][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.376964][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.376964][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.376964][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.376964][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.376964][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.376964][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.376964][ T1056] [ 1525.376964][ T1056] Uninit was stored to memory at: [ 1525.376964][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1525.376964][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.376964][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.376964][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.376964][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.376964][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.376964][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.376964][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.376964][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.376964][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.376964][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.376964][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.376964][ T1056] [ 1525.376964][ T1056] Uninit was stored to memory at: [ 1525.376964][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1525.376964][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.376964][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.376964][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.376964][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.376964][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.376964][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.376964][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.376964][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.376964][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.376964][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.790254][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.790254][ T1056] [ 1525.790254][ T1056] Uninit was stored to memory at: [ 1525.790254][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1525.790254][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.790254][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.790254][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.790254][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.790254][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.790254][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.790254][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.790254][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.790254][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.790254][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.790254][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.790254][ T1056] [ 1525.790254][ T1056] Uninit was stored to memory at: [ 1525.790254][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1525.790254][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.790254][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.790254][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.790254][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.790254][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.790254][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.790254][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.790254][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.790254][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.790254][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.790254][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.790254][ T1056] [ 1525.790254][ T1056] Uninit was stored to memory at: [ 1525.790254][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1525.790254][ T1056] __msan_chain_origin+0x57/0xa0 [ 1525.790254][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1525.790254][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1525.790254][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1525.790254][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1525.790254][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1525.790254][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1525.790254][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1525.790254][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1525.790254][ T1056] do_SYSENTER_32+0x73/0x90 [ 1525.790254][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1525.790254][ T1056] [ 1525.790254][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1525.790254][ T1056] do_recvmmsg+0xbc/0x2300 [ 1525.790254][ T1056] do_recvmmsg+0xbc/0x2300 [ 1526.434855][ T1056] not chained 270000 origins [ 1526.441867][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1526.441867][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.441867][ T1056] Call Trace: [ 1526.441867][ T1056] dump_stack+0x21c/0x280 [ 1526.441867][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1526.441867][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1526.441867][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1526.441867][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1526.441867][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1526.441867][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1526.441867][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1526.441867][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1526.441867][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1526.441867][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1526.441867][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1526.441867][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1526.441867][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1526.441867][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1526.441867][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1526.441867][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1526.441867][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1526.441867][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] RIP: 0023:0xf7fa1549 [ 1526.441867][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1526.441867][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1526.441867][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1526.441867][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1526.441867][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1526.441867][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1526.441867][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1526.441867][ T1056] Uninit was stored to memory at: [ 1526.441867][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] [ 1526.441867][ T1056] Uninit was stored to memory at: [ 1526.441867][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] [ 1526.441867][ T1056] Uninit was stored to memory at: [ 1526.441867][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] [ 1526.441867][ T1056] Uninit was stored to memory at: [ 1526.441867][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] [ 1526.441867][ T1056] Uninit was stored to memory at: [ 1526.441867][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] [ 1526.441867][ T1056] Uninit was stored to memory at: [ 1526.441867][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] [ 1526.441867][ T1056] Uninit was stored to memory at: [ 1526.441867][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1526.441867][ T1056] __msan_chain_origin+0x57/0xa0 [ 1526.441867][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1526.441867][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1526.441867][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1526.441867][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1526.441867][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1526.441867][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1526.441867][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1526.441867][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1526.441867][ T1056] do_SYSENTER_32+0x73/0x90 [ 1526.441867][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1526.441867][ T1056] [ 1526.441867][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1526.441867][ T1056] do_recvmmsg+0xbc/0x2300 [ 1526.441867][ T1056] do_recvmmsg+0xbc/0x2300 [ 1527.911666][ T1056] not chained 280000 origins [ 1527.911844][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1527.911844][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.911844][ T1056] Call Trace: [ 1527.911844][ T1056] dump_stack+0x21c/0x280 [ 1527.911844][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1527.911844][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1527.911844][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1527.911844][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1527.911844][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1527.911844][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1527.911844][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1527.911844][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1527.911844][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1527.911844][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1527.911844][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1527.911844][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1527.911844][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1527.911844][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1527.911844][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1527.911844][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1527.911844][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] RIP: 0023:0xf7fa1549 [ 1527.911844][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1527.911844][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1527.911844][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1527.911844][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1527.911844][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1527.911844][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1527.911844][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1527.911844][ T1056] Uninit was stored to memory at: [ 1527.911844][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] [ 1527.911844][ T1056] Uninit was stored to memory at: [ 1527.911844][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] [ 1527.911844][ T1056] Uninit was stored to memory at: [ 1527.911844][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] [ 1527.911844][ T1056] Uninit was stored to memory at: [ 1527.911844][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] [ 1527.911844][ T1056] Uninit was stored to memory at: [ 1527.911844][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] [ 1527.911844][ T1056] Uninit was stored to memory at: [ 1527.911844][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] [ 1527.911844][ T1056] Uninit was stored to memory at: [ 1527.911844][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1527.911844][ T1056] __msan_chain_origin+0x57/0xa0 [ 1527.911844][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1527.911844][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1527.911844][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1527.911844][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1527.911844][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1527.911844][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1527.911844][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1527.911844][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1527.911844][ T1056] do_SYSENTER_32+0x73/0x90 [ 1527.911844][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1527.911844][ T1056] [ 1527.911844][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1527.911844][ T1056] do_recvmmsg+0xbc/0x2300 [ 1527.911844][ T1056] do_recvmmsg+0xbc/0x2300 [ 1529.454281][ T1056] not chained 290000 origins [ 1529.461691][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1529.462015][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.462015][ T1056] Call Trace: [ 1529.462015][ T1056] dump_stack+0x21c/0x280 [ 1529.462015][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1529.462015][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1529.462015][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1529.462015][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1529.462015][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1529.462015][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1529.462015][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1529.462015][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1529.462015][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1529.462015][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1529.462015][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1529.462015][ T1056] __msan_chain_origin+0x57/0xa0 [ 1529.462015][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1529.462015][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1529.462015][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1529.615689][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1529.615689][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1529.615689][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1529.615689][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1529.615689][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1529.652852][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1529.652852][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1529.652852][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1529.652852][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1529.652852][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.652852][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.652852][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1529.652852][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1529.652852][ T1056] do_SYSENTER_32+0x73/0x90 [ 1529.652852][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.652852][ T1056] RIP: 0023:0xf7fa1549 [ 1529.652852][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1529.652852][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1529.652852][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1529.652852][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.652852][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.652852][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1529.652852][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.652852][ T1056] Uninit was stored to memory at: [ 1529.652852][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1529.652852][ T1056] __msan_chain_origin+0x57/0xa0 [ 1529.652852][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1529.652852][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1529.652852][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1529.652852][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1529.652852][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.652852][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.652852][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1529.652852][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1529.652852][ T1056] do_SYSENTER_32+0x73/0x90 [ 1529.923029][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.923029][ T1056] [ 1529.923029][ T1056] Uninit was stored to memory at: [ 1529.923029][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1529.923029][ T1056] __msan_chain_origin+0x57/0xa0 [ 1529.923029][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1529.923029][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1529.923029][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1529.923029][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1529.923029][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1529.923029][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1529.923029][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1529.923029][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1529.923029][ T1056] do_SYSENTER_32+0x73/0x90 [ 1529.923029][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1529.923029][ T1056] [ 1529.923029][ T1056] Uninit was stored to memory at: [ 1529.923029][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1529.923029][ T1056] __msan_chain_origin+0x57/0xa0 [ 1529.923029][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1529.923029][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1529.923029][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1529.923029][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1530.106391][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.106391][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.106391][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1530.106391][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1530.106391][ T1056] do_SYSENTER_32+0x73/0x90 [ 1530.106391][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.106391][ T1056] [ 1530.106391][ T1056] Uninit was stored to memory at: [ 1530.106391][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1530.106391][ T1056] __msan_chain_origin+0x57/0xa0 [ 1530.106391][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1530.106391][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1530.106391][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1530.106391][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1530.106391][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.106391][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.106391][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1530.106391][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1530.106391][ T1056] do_SYSENTER_32+0x73/0x90 [ 1530.106391][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.106391][ T1056] [ 1530.106391][ T1056] Uninit was stored to memory at: [ 1530.106391][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1530.106391][ T1056] __msan_chain_origin+0x57/0xa0 [ 1530.106391][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1530.106391][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1530.106391][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1530.106391][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1530.106391][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.315976][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.315976][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1530.315976][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1530.315976][ T1056] do_SYSENTER_32+0x73/0x90 [ 1530.315976][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.315976][ T1056] [ 1530.315976][ T1056] Uninit was stored to memory at: [ 1530.315976][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1530.315976][ T1056] __msan_chain_origin+0x57/0xa0 [ 1530.315976][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1530.315976][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1530.405623][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1530.405623][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1530.405623][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.405623][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.435753][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1530.435753][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1530.435753][ T1056] do_SYSENTER_32+0x73/0x90 [ 1530.462093][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.462093][ T1056] [ 1530.462093][ T1056] Uninit was stored to memory at: [ 1530.462093][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1530.462093][ T1056] __msan_chain_origin+0x57/0xa0 [ 1530.462093][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1530.462093][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1530.462093][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1530.523631][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1530.523631][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1530.523631][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1530.523631][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1530.555798][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1530.555798][ T1056] do_SYSENTER_32+0x73/0x90 [ 1530.555798][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1530.585598][ T1056] [ 1530.585598][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1530.585598][ T1056] do_recvmmsg+0xbc/0x2300 [ 1530.585598][ T1056] do_recvmmsg+0xbc/0x2300 [ 1530.991850][ T1056] not chained 300000 origins [ 1530.992723][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1530.992723][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1530.992723][ T1056] Call Trace: [ 1530.992723][ T1056] dump_stack+0x21c/0x280 [ 1530.992723][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1530.992723][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1531.048074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1531.048074][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1531.048074][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1531.048074][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1531.048074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1531.048074][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1531.048074][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1531.048074][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1531.048074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1531.048074][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1531.048074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1531.048074][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1531.048074][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1531.048074][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1531.048074][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] RIP: 0023:0xf7fa1549 [ 1531.048074][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1531.048074][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1531.048074][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1531.048074][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1531.048074][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1531.048074][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1531.048074][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1531.048074][ T1056] Uninit was stored to memory at: [ 1531.048074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] [ 1531.048074][ T1056] Uninit was stored to memory at: [ 1531.048074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] [ 1531.048074][ T1056] Uninit was stored to memory at: [ 1531.048074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] [ 1531.048074][ T1056] Uninit was stored to memory at: [ 1531.048074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] [ 1531.048074][ T1056] Uninit was stored to memory at: [ 1531.048074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] [ 1531.048074][ T1056] Uninit was stored to memory at: [ 1531.048074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] [ 1531.048074][ T1056] Uninit was stored to memory at: [ 1531.048074][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1531.048074][ T1056] __msan_chain_origin+0x57/0xa0 [ 1531.048074][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1531.048074][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1531.048074][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1531.048074][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1531.048074][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1531.048074][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1531.048074][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1531.048074][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1531.048074][ T1056] do_SYSENTER_32+0x73/0x90 [ 1531.048074][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1531.048074][ T1056] [ 1531.048074][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1531.048074][ T1056] do_recvmmsg+0xbc/0x2300 [ 1531.048074][ T1056] do_recvmmsg+0xbc/0x2300 [ 1532.437484][ T1056] not chained 310000 origins [ 1532.441830][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1532.441830][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.441830][ T1056] Call Trace: [ 1532.441830][ T1056] dump_stack+0x21c/0x280 [ 1532.441830][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1532.441830][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1532.441830][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1532.441830][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1532.441830][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1532.441830][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1532.441830][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1532.441830][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1532.441830][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1532.441830][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1532.441830][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1532.441830][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1532.441830][ T1056] __msan_chain_origin+0x57/0xa0 [ 1532.441830][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1532.441830][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1532.441830][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1532.441830][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1532.441830][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1532.441830][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1532.441830][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1532.441830][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1532.441830][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1532.441830][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1532.441830][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1532.441830][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1532.441830][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.441830][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.441830][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1532.441830][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1532.441830][ T1056] do_SYSENTER_32+0x73/0x90 [ 1532.441830][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.441830][ T1056] RIP: 0023:0xf7fa1549 [ 1532.441830][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1532.441830][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1532.441830][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1532.441830][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1532.441830][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1532.441830][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1532.441830][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1532.441830][ T1056] Uninit was stored to memory at: [ 1532.441830][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1532.441830][ T1056] __msan_chain_origin+0x57/0xa0 [ 1532.441830][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1532.441830][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1532.441830][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1532.441830][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1532.441830][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.441830][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.441830][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1532.441830][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1532.441830][ T1056] do_SYSENTER_32+0x73/0x90 [ 1532.441830][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.441830][ T1056] [ 1532.441830][ T1056] Uninit was stored to memory at: [ 1532.441830][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1532.441830][ T1056] __msan_chain_origin+0x57/0xa0 [ 1532.441830][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1532.441830][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1532.441830][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1532.441830][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1532.441830][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.441830][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.441830][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1532.441830][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1532.441830][ T1056] do_SYSENTER_32+0x73/0x90 [ 1532.441830][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.441830][ T1056] [ 1532.441830][ T1056] Uninit was stored to memory at: [ 1532.441830][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1532.441830][ T1056] __msan_chain_origin+0x57/0xa0 [ 1532.441830][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1532.441830][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1532.441830][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1532.441830][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1532.441830][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1532.441830][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1532.441830][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1532.441830][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1532.441830][ T1056] do_SYSENTER_32+0x73/0x90 [ 1532.441830][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1532.441830][ T1056] [ 1532.441830][ T1056] Uninit was stored to memory at: [ 1532.441830][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1532.441830][ T1056] __msan_chain_origin+0x57/0xa0 [ 1532.441830][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1532.441830][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1532.441830][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.197842][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.197842][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.197842][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.197842][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.197842][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.197842][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.197842][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.197842][ T1056] [ 1533.197842][ T1056] Uninit was stored to memory at: [ 1533.197842][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1533.197842][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.197842][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.197842][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.197842][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.197842][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.197842][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.197842][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.197842][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.197842][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.197842][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.197842][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.197842][ T1056] [ 1533.197842][ T1056] Uninit was stored to memory at: [ 1533.197842][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1533.372671][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.372671][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.372671][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.372671][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.372671][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.372671][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.372671][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.372671][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.372671][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.372671][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.372671][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.372671][ T1056] [ 1533.372671][ T1056] Uninit was stored to memory at: [ 1533.372671][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1533.372671][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.372671][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.372671][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.372671][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.372671][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.372671][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.372671][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.372671][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.372671][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.372671][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.372671][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.372671][ T1056] [ 1533.372671][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1533.372671][ T1056] do_recvmmsg+0xbc/0x2300 [ 1533.372671][ T1056] do_recvmmsg+0xbc/0x2300 [ 1533.941370][ T1056] not chained 320000 origins [ 1533.941851][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1533.941851][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1533.941851][ T1056] Call Trace: [ 1533.941851][ T1056] dump_stack+0x21c/0x280 [ 1533.941851][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1533.941851][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1533.941851][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1533.941851][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1533.941851][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1533.941851][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1533.941851][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1533.941851][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1533.941851][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1533.941851][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1533.941851][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1533.941851][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.941851][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.941851][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.941851][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.941851][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1533.941851][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1533.941851][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1533.941851][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1533.941851][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1533.941851][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1533.941851][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.941851][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1533.941851][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1533.941851][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.941851][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.941851][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.941851][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.941851][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.941851][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.941851][ T1056] RIP: 0023:0xf7fa1549 [ 1533.941851][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1533.941851][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1533.941851][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1533.941851][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1533.941851][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1533.941851][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1533.941851][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1533.941851][ T1056] Uninit was stored to memory at: [ 1533.941851][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1533.941851][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.941851][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.941851][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.941851][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.941851][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.941851][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.941851][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.941851][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.941851][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.941851][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.941851][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.941851][ T1056] [ 1533.941851][ T1056] Uninit was stored to memory at: [ 1533.941851][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1533.941851][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.941851][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.941851][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.941851][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.941851][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.941851][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.941851][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.941851][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.941851][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.941851][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.941851][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.941851][ T1056] [ 1533.941851][ T1056] Uninit was stored to memory at: [ 1533.941851][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1533.941851][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.941851][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.941851][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.941851][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.941851][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1533.941851][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1533.941851][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1533.941851][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1533.941851][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1533.941851][ T1056] do_SYSENTER_32+0x73/0x90 [ 1533.941851][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1533.941851][ T1056] [ 1533.941851][ T1056] Uninit was stored to memory at: [ 1533.941851][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1533.941851][ T1056] __msan_chain_origin+0x57/0xa0 [ 1533.941851][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1533.941851][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1533.941851][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1533.941851][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1534.637828][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.637828][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.637828][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1534.637828][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1534.637828][ T1056] do_SYSENTER_32+0x73/0x90 [ 1534.637828][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.637828][ T1056] [ 1534.637828][ T1056] Uninit was stored to memory at: [ 1534.637828][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1534.637828][ T1056] __msan_chain_origin+0x57/0xa0 [ 1534.637828][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1534.637828][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1534.637828][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1534.637828][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1534.637828][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.637828][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.637828][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1534.637828][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1534.637828][ T1056] do_SYSENTER_32+0x73/0x90 [ 1534.637828][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.637828][ T1056] [ 1534.637828][ T1056] Uninit was stored to memory at: [ 1534.637828][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1534.637828][ T1056] __msan_chain_origin+0x57/0xa0 [ 1534.637828][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1534.637828][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1534.637828][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1534.637828][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1534.637828][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.637828][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.637828][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1534.637828][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1534.637828][ T1056] do_SYSENTER_32+0x73/0x90 [ 1534.637828][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.637828][ T1056] [ 1534.637828][ T1056] Uninit was stored to memory at: [ 1534.637828][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1534.637828][ T1056] __msan_chain_origin+0x57/0xa0 [ 1534.637828][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1534.637828][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1534.637828][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1534.637828][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1534.637828][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1534.637828][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1534.637828][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1534.637828][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1534.637828][ T1056] do_SYSENTER_32+0x73/0x90 [ 1534.637828][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1534.637828][ T1056] [ 1534.637828][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1534.637828][ T1056] do_recvmmsg+0xbc/0x2300 [ 1534.637828][ T1056] do_recvmmsg+0xbc/0x2300 [ 1535.346962][ T1056] not chained 330000 origins [ 1535.351607][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1535.351855][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.351855][ T1056] Call Trace: [ 1535.351855][ T1056] dump_stack+0x21c/0x280 [ 1535.351855][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1535.351855][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1535.351855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1535.351855][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1535.351855][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1535.351855][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1535.351855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1535.351855][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1535.351855][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1535.351855][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1535.351855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1535.351855][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1535.351855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1535.351855][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1535.351855][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1535.351855][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1535.351855][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] RIP: 0023:0xf7fa1549 [ 1535.351855][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1535.351855][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1535.351855][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1535.351855][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1535.351855][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1535.351855][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1535.351855][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1535.351855][ T1056] Uninit was stored to memory at: [ 1535.351855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] [ 1535.351855][ T1056] Uninit was stored to memory at: [ 1535.351855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] [ 1535.351855][ T1056] Uninit was stored to memory at: [ 1535.351855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] [ 1535.351855][ T1056] Uninit was stored to memory at: [ 1535.351855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] [ 1535.351855][ T1056] Uninit was stored to memory at: [ 1535.351855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] [ 1535.351855][ T1056] Uninit was stored to memory at: [ 1535.351855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] [ 1535.351855][ T1056] Uninit was stored to memory at: [ 1535.351855][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1535.351855][ T1056] __msan_chain_origin+0x57/0xa0 [ 1535.351855][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1535.351855][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1535.351855][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1535.351855][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1535.351855][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1535.351855][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1535.351855][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1535.351855][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1535.351855][ T1056] do_SYSENTER_32+0x73/0x90 [ 1535.351855][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1535.351855][ T1056] [ 1535.351855][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1535.351855][ T1056] do_recvmmsg+0xbc/0x2300 [ 1535.351855][ T1056] do_recvmmsg+0xbc/0x2300 [ 1536.769788][ T1056] not chained 340000 origins [ 1536.771862][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1536.784266][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1536.784266][ T1056] Call Trace: [ 1536.784266][ T1056] dump_stack+0x21c/0x280 [ 1536.784266][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1536.784266][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1536.784266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1536.784266][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1536.784266][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1536.784266][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1536.784266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1536.784266][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1536.784266][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1536.784266][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1536.784266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1536.784266][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1536.784266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1536.784266][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1536.784266][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1536.784266][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1536.784266][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] RIP: 0023:0xf7fa1549 [ 1536.784266][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1536.784266][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1536.784266][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1536.784266][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1536.784266][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1536.784266][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1536.784266][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1536.784266][ T1056] Uninit was stored to memory at: [ 1536.784266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] [ 1536.784266][ T1056] Uninit was stored to memory at: [ 1536.784266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] [ 1536.784266][ T1056] Uninit was stored to memory at: [ 1536.784266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] [ 1536.784266][ T1056] Uninit was stored to memory at: [ 1536.784266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] [ 1536.784266][ T1056] Uninit was stored to memory at: [ 1536.784266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] [ 1536.784266][ T1056] Uninit was stored to memory at: [ 1536.784266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] [ 1536.784266][ T1056] Uninit was stored to memory at: [ 1536.784266][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1536.784266][ T1056] __msan_chain_origin+0x57/0xa0 [ 1536.784266][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1536.784266][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1536.784266][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1536.784266][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1536.784266][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1536.784266][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1536.784266][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1536.784266][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1536.784266][ T1056] do_SYSENTER_32+0x73/0x90 [ 1536.784266][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1536.784266][ T1056] [ 1536.784266][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1536.784266][ T1056] do_recvmmsg+0xbc/0x2300 [ 1536.784266][ T1056] do_recvmmsg+0xbc/0x2300 [ 1538.106326][ T1056] not chained 350000 origins [ 1538.111824][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1538.114030][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.122315][ T1056] Call Trace: [ 1538.122315][ T1056] dump_stack+0x21c/0x280 [ 1538.142037][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1538.142037][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1538.142037][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1538.142037][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1538.142037][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1538.173416][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1538.173416][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1538.173416][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1538.173416][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1538.173416][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1538.207364][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1538.207364][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.207364][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.207364][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.207364][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.207364][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1538.207364][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1538.207364][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1538.207364][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1538.207364][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1538.207364][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1538.207364][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.207364][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1538.207364][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1538.207364][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.207364][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.207364][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.207364][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] RIP: 0023:0xf7fa1549 [ 1538.335680][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1538.335680][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1538.335680][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1538.335680][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1538.335680][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1538.335680][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1538.335680][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1538.335680][ T1056] Uninit was stored to memory at: [ 1538.335680][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1538.335680][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.335680][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.335680][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.335680][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.335680][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.335680][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.335680][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.335680][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.335680][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] [ 1538.335680][ T1056] Uninit was stored to memory at: [ 1538.335680][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1538.335680][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.335680][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.335680][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.335680][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.335680][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.335680][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.335680][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.335680][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.335680][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] [ 1538.335680][ T1056] Uninit was stored to memory at: [ 1538.335680][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1538.335680][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.335680][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.335680][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.335680][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.335680][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.335680][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.335680][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.335680][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.335680][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] [ 1538.335680][ T1056] Uninit was stored to memory at: [ 1538.335680][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1538.335680][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.335680][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.335680][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.335680][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.335680][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.335680][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.335680][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.335680][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.335680][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] [ 1538.335680][ T1056] Uninit was stored to memory at: [ 1538.335680][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1538.335680][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.335680][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.335680][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.335680][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.335680][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.335680][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.335680][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.335680][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.335680][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] [ 1538.335680][ T1056] Uninit was stored to memory at: [ 1538.335680][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1538.335680][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.335680][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.335680][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.335680][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.335680][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.335680][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.335680][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.335680][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.335680][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] [ 1538.335680][ T1056] Uninit was stored to memory at: [ 1538.335680][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1538.335680][ T1056] __msan_chain_origin+0x57/0xa0 [ 1538.335680][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1538.335680][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1538.335680][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1538.335680][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1538.335680][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1538.335680][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1538.335680][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1538.335680][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1538.335680][ T1056] do_SYSENTER_32+0x73/0x90 [ 1538.335680][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1538.335680][ T1056] [ 1538.335680][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1538.335680][ T1056] do_recvmmsg+0xbc/0x2300 [ 1538.335680][ T1056] do_recvmmsg+0xbc/0x2300 [ 1539.411525][ T1056] not chained 360000 origins [ 1539.412028][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1539.412028][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.412028][ T1056] Call Trace: [ 1539.412028][ T1056] dump_stack+0x21c/0x280 [ 1539.412028][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1539.412028][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1539.457403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1539.457403][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1539.457403][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1539.457403][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1539.457403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1539.457403][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1539.457403][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1539.457403][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1539.457403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1539.457403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1539.457403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1539.457403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1539.546888][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1539.546888][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1539.546888][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1539.546888][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1539.546888][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1539.546888][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1539.583515][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1539.583515][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1539.583515][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1539.583515][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1539.583515][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.583515][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.583515][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1539.583515][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1539.583515][ T1056] do_SYSENTER_32+0x73/0x90 [ 1539.583515][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.583515][ T1056] RIP: 0023:0xf7fa1549 [ 1539.583515][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1539.583515][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1539.583515][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1539.583515][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1539.583515][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1539.583515][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1539.583515][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1539.583515][ T1056] Uninit was stored to memory at: [ 1539.583515][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1539.583515][ T1056] __msan_chain_origin+0x57/0xa0 [ 1539.583515][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1539.583515][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1539.583515][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1539.583515][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1539.583515][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.583515][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.583515][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1539.583515][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1539.583515][ T1056] do_SYSENTER_32+0x73/0x90 [ 1539.583515][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.583515][ T1056] [ 1539.583515][ T1056] Uninit was stored to memory at: [ 1539.583515][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1539.583515][ T1056] __msan_chain_origin+0x57/0xa0 [ 1539.583515][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1539.583515][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1539.583515][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1539.583515][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1539.583515][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.583515][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.583515][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1539.583515][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1539.583515][ T1056] do_SYSENTER_32+0x73/0x90 [ 1539.583515][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.583515][ T1056] [ 1539.583515][ T1056] Uninit was stored to memory at: [ 1539.583515][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1539.583515][ T1056] __msan_chain_origin+0x57/0xa0 [ 1539.583515][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1539.919421][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1539.919421][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1539.919421][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1539.919421][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1539.919421][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1539.919421][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1539.919421][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1539.919421][ T1056] do_SYSENTER_32+0x73/0x90 [ 1539.919421][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1539.919421][ T1056] [ 1539.919421][ T1056] Uninit was stored to memory at: [ 1539.919421][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1539.919421][ T1056] __msan_chain_origin+0x57/0xa0 [ 1539.919421][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1539.919421][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1539.919421][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1539.919421][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1539.919421][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.030561][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.030561][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1540.030561][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1540.030561][ T1056] do_SYSENTER_32+0x73/0x90 [ 1540.030561][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.030561][ T1056] [ 1540.030561][ T1056] Uninit was stored to memory at: [ 1540.030561][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1540.030561][ T1056] __msan_chain_origin+0x57/0xa0 [ 1540.030561][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1540.030561][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1540.030561][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1540.030561][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1540.030561][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.030561][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.030561][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1540.030561][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1540.030561][ T1056] do_SYSENTER_32+0x73/0x90 [ 1540.030561][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.030561][ T1056] [ 1540.030561][ T1056] Uninit was stored to memory at: [ 1540.030561][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1540.030561][ T1056] __msan_chain_origin+0x57/0xa0 [ 1540.030561][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1540.030561][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1540.030561][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1540.030561][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1540.030561][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.030561][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.030561][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1540.030561][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1540.030561][ T1056] do_SYSENTER_32+0x73/0x90 [ 1540.030561][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.030561][ T1056] [ 1540.030561][ T1056] Uninit was stored to memory at: [ 1540.030561][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1540.030561][ T1056] __msan_chain_origin+0x57/0xa0 [ 1540.030561][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1540.030561][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1540.030561][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1540.030561][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1540.030561][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.030561][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.030561][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1540.030561][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1540.030561][ T1056] do_SYSENTER_32+0x73/0x90 [ 1540.030561][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.030561][ T1056] [ 1540.336407][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1540.336407][ T1056] do_recvmmsg+0xbc/0x2300 [ 1540.336407][ T1056] do_recvmmsg+0xbc/0x2300 [ 1540.687751][ T1056] not chained 370000 origins [ 1540.691831][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1540.694294][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.694294][ T1056] Call Trace: [ 1540.694294][ T1056] dump_stack+0x21c/0x280 [ 1540.694294][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1540.694294][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1540.694294][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1540.694294][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1540.694294][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1540.694294][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1540.694294][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1540.694294][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1540.782056][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1540.782056][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1540.782056][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1540.782056][ T1056] __msan_chain_origin+0x57/0xa0 [ 1540.782056][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1540.782056][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1540.782056][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1540.782056][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1540.782056][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1540.782056][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1540.782056][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1540.782056][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1540.782056][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1540.782056][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1540.782056][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1540.782056][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1540.782056][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.782056][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.892017][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1540.892017][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1540.892017][ T1056] do_SYSENTER_32+0x73/0x90 [ 1540.892017][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.892017][ T1056] RIP: 0023:0xf7fa1549 [ 1540.892017][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1540.892017][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1540.892017][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1540.892017][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1540.892017][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1540.892017][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1540.892017][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1540.892017][ T1056] Uninit was stored to memory at: [ 1540.892017][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1540.892017][ T1056] __msan_chain_origin+0x57/0xa0 [ 1540.892017][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1540.892017][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1540.892017][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1540.892017][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1540.892017][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.892017][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.892017][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1540.892017][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1540.892017][ T1056] do_SYSENTER_32+0x73/0x90 [ 1540.892017][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.892017][ T1056] [ 1540.892017][ T1056] Uninit was stored to memory at: [ 1540.892017][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1540.892017][ T1056] __msan_chain_origin+0x57/0xa0 [ 1540.892017][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1540.892017][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1540.892017][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1540.892017][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1540.892017][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1540.892017][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1540.892017][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1540.892017][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1540.892017][ T1056] do_SYSENTER_32+0x73/0x90 [ 1540.892017][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1540.892017][ T1056] [ 1540.892017][ T1056] Uninit was stored to memory at: [ 1541.185179][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1541.185179][ T1056] __msan_chain_origin+0x57/0xa0 [ 1541.185179][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1541.185179][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1541.185179][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1541.185179][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1541.185179][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.185179][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.234357][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1541.234357][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1541.234357][ T1056] do_SYSENTER_32+0x73/0x90 [ 1541.234357][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.234357][ T1056] [ 1541.234357][ T1056] Uninit was stored to memory at: [ 1541.234357][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1541.234357][ T1056] __msan_chain_origin+0x57/0xa0 [ 1541.234357][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1541.234357][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1541.234357][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1541.234357][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1541.234357][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.234357][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.323032][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1541.323032][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1541.323032][ T1056] do_SYSENTER_32+0x73/0x90 [ 1541.323032][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.352058][ T1056] [ 1541.352058][ T1056] Uninit was stored to memory at: [ 1541.352058][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1541.352058][ T1056] __msan_chain_origin+0x57/0xa0 [ 1541.382029][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1541.382029][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1541.382029][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1541.382029][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1541.382029][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.382029][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.382029][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1541.382029][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1541.382029][ T1056] do_SYSENTER_32+0x73/0x90 [ 1541.382029][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.444870][ T1056] [ 1541.444870][ T1056] Uninit was stored to memory at: [ 1541.455302][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1541.455302][ T1056] __msan_chain_origin+0x57/0xa0 [ 1541.455302][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1541.472090][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1541.472090][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1541.472090][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1541.472090][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.472090][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.501986][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1541.501986][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1541.501986][ T1056] do_SYSENTER_32+0x73/0x90 [ 1541.501986][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.501986][ T1056] [ 1541.501986][ T1056] Uninit was stored to memory at: [ 1541.533130][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1541.533130][ T1056] __msan_chain_origin+0x57/0xa0 [ 1541.533130][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1541.533130][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1541.533130][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1541.566020][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1541.566020][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.566020][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.594590][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1541.594590][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1541.594590][ T1056] do_SYSENTER_32+0x73/0x90 [ 1541.594590][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.594590][ T1056] [ 1541.622714][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1541.622714][ T1056] do_recvmmsg+0xbc/0x2300 [ 1541.622714][ T1056] do_recvmmsg+0xbc/0x2300 [ 1541.940045][ T1056] not chained 380000 origins [ 1541.941839][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1541.949198][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1541.955562][ T1056] Call Trace: [ 1541.955562][ T1056] dump_stack+0x21c/0x280 [ 1541.955562][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1541.955562][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1541.955562][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1541.955562][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1541.955562][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1541.955562][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1541.955562][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1541.955562][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1541.955562][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1541.955562][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1541.955562][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1541.955562][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1541.955562][ T1056] __msan_chain_origin+0x57/0xa0 [ 1541.955562][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1541.955562][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1541.955562][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1541.955562][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1541.955562][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1541.955562][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1541.955562][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1541.955562][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1541.955562][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1541.955562][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1541.955562][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1541.955562][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1541.955562][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1541.955562][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1541.955562][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1541.955562][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1541.955562][ T1056] do_SYSENTER_32+0x73/0x90 [ 1541.955562][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1541.955562][ T1056] RIP: 0023:0xf7fa1549 [ 1541.955562][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1542.195347][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1542.195347][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1542.195347][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1542.195347][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1542.195347][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1542.195347][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1542.195347][ T1056] Uninit was stored to memory at: [ 1542.195347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1542.195347][ T1056] __msan_chain_origin+0x57/0xa0 [ 1542.195347][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1542.195347][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1542.195347][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1542.195347][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1542.195347][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.195347][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.195347][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1542.195347][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1542.195347][ T1056] do_SYSENTER_32+0x73/0x90 [ 1542.195347][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.195347][ T1056] [ 1542.195347][ T1056] Uninit was stored to memory at: [ 1542.195347][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1542.342040][ T1056] __msan_chain_origin+0x57/0xa0 [ 1542.342040][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1542.342040][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1542.342040][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1542.342040][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1542.342040][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.342040][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.342040][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1542.342040][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1542.342040][ T1056] do_SYSENTER_32+0x73/0x90 [ 1542.342040][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.342040][ T1056] [ 1542.342040][ T1056] Uninit was stored to memory at: [ 1542.342040][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1542.342040][ T1056] __msan_chain_origin+0x57/0xa0 [ 1542.430188][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1542.430188][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1542.430188][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1542.430188][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1542.430188][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.430188][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.430188][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1542.430188][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1542.430188][ T1056] do_SYSENTER_32+0x73/0x90 [ 1542.430188][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.495448][ T1056] [ 1542.495448][ T1056] Uninit was stored to memory at: [ 1542.495448][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1542.495448][ T1056] __msan_chain_origin+0x57/0xa0 [ 1542.495448][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1542.495448][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1542.495448][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1542.495448][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1542.495448][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.495448][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.495448][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1542.495448][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1542.495448][ T1056] do_SYSENTER_32+0x73/0x90 [ 1542.495448][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.495448][ T1056] [ 1542.495448][ T1056] Uninit was stored to memory at: [ 1542.495448][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1542.495448][ T1056] __msan_chain_origin+0x57/0xa0 [ 1542.495448][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1542.495448][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1542.612112][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1542.612112][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1542.612112][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.612112][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.612112][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1542.612112][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1542.612112][ T1056] do_SYSENTER_32+0x73/0x90 [ 1542.612112][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.612112][ T1056] [ 1542.612112][ T1056] Uninit was stored to memory at: [ 1542.612112][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1542.612112][ T1056] __msan_chain_origin+0x57/0xa0 [ 1542.612112][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1542.612112][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1542.612112][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1542.703016][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1542.703016][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.703016][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.703016][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1542.703016][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1542.703016][ T1056] do_SYSENTER_32+0x73/0x90 [ 1542.703016][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.703016][ T1056] [ 1542.703016][ T1056] Uninit was stored to memory at: [ 1542.703016][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1542.703016][ T1056] __msan_chain_origin+0x57/0xa0 [ 1542.703016][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1542.703016][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1542.703016][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1542.703016][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1542.793414][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1542.793414][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1542.793414][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1542.793414][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1542.793414][ T1056] do_SYSENTER_32+0x73/0x90 [ 1542.822149][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1542.822149][ T1056] [ 1542.822149][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1542.822149][ T1056] do_recvmmsg+0xbc/0x2300 [ 1542.822149][ T1056] do_recvmmsg+0xbc/0x2300 [ 1543.143394][ T1056] not chained 390000 origins [ 1543.148023][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1543.151823][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.151823][ T1056] Call Trace: [ 1543.151823][ T1056] dump_stack+0x21c/0x280 [ 1543.151823][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1543.151823][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1543.151823][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1543.151823][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1543.151823][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1543.151823][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1543.151823][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1543.151823][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1543.151823][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1543.151823][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1543.151823][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1543.151823][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1543.151823][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.151823][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.151823][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.151823][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.151823][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1543.151823][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1543.151823][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1543.151823][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1543.151823][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1543.151823][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1543.151823][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.151823][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1543.151823][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1543.151823][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.151823][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.151823][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.151823][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.151823][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.151823][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.151823][ T1056] RIP: 0023:0xf7fa1549 [ 1543.151823][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1543.151823][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1543.151823][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1543.151823][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1543.151823][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1543.151823][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1543.452151][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1543.452151][ T1056] Uninit was stored to memory at: [ 1543.452151][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1543.452151][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.452151][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.452151][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.452151][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.452151][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.452151][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.452151][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.452151][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.452151][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.452151][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.452151][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.452151][ T1056] [ 1543.452151][ T1056] Uninit was stored to memory at: [ 1543.452151][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1543.452151][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.452151][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.452151][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.452151][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.452151][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.452151][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.452151][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.452151][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.452151][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.452151][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.452151][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.452151][ T1056] [ 1543.452151][ T1056] Uninit was stored to memory at: [ 1543.452151][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1543.452151][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.452151][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.452151][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.452151][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.452151][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.452151][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.452151][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.452151][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.452151][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.452151][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.452151][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.452151][ T1056] [ 1543.452151][ T1056] Uninit was stored to memory at: [ 1543.452151][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1543.452151][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.452151][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.452151][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.452151][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.452151][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.452151][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.452151][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.452151][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.452151][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.452151][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.452151][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.452151][ T1056] [ 1543.452151][ T1056] Uninit was stored to memory at: [ 1543.452151][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1543.452151][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.452151][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.452151][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.452151][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.452151][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.452151][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.452151][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.452151][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.452151][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.452151][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.452151][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.452151][ T1056] [ 1543.452151][ T1056] Uninit was stored to memory at: [ 1543.452151][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1543.452151][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.452151][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.452151][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.452151][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.452151][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.452151][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.452151][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.452151][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.452151][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.452151][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.452151][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.452151][ T1056] [ 1543.452151][ T1056] Uninit was stored to memory at: [ 1543.452151][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1543.452151][ T1056] __msan_chain_origin+0x57/0xa0 [ 1543.452151][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1543.452151][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1543.452151][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1543.452151][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1543.452151][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1543.452151][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1543.452151][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1543.452151][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1543.452151][ T1056] do_SYSENTER_32+0x73/0x90 [ 1543.452151][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1543.452151][ T1056] [ 1543.452151][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1543.452151][ T1056] do_recvmmsg+0xbc/0x2300 [ 1543.452151][ T1056] do_recvmmsg+0xbc/0x2300 [ 1547.343116][ T1056] not chained 400000 origins [ 1547.347742][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1547.351859][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1547.351859][ T1056] Call Trace: [ 1547.351859][ T1056] dump_stack+0x21c/0x280 [ 1547.351859][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1547.351859][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1547.351859][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1547.351859][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1547.351859][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1547.351859][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1547.351859][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1547.351859][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1547.351859][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1547.351859][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1547.351859][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1547.351859][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1547.351859][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1547.351859][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1547.351859][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1547.351859][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1547.351859][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1547.351859][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] RIP: 0023:0xf7fa1549 [ 1547.351859][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1547.351859][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1547.351859][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1547.351859][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1547.351859][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1547.351859][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1547.351859][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1547.351859][ T1056] Uninit was stored to memory at: [ 1547.351859][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] [ 1547.351859][ T1056] Uninit was stored to memory at: [ 1547.351859][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] [ 1547.351859][ T1056] Uninit was stored to memory at: [ 1547.351859][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] [ 1547.351859][ T1056] Uninit was stored to memory at: [ 1547.351859][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] [ 1547.351859][ T1056] Uninit was stored to memory at: [ 1547.351859][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] [ 1547.351859][ T1056] Uninit was stored to memory at: [ 1547.351859][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] [ 1547.351859][ T1056] Uninit was stored to memory at: [ 1547.351859][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1547.351859][ T1056] __msan_chain_origin+0x57/0xa0 [ 1547.351859][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1547.351859][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1547.351859][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1547.351859][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1547.351859][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1547.351859][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1547.351859][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1547.351859][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1547.351859][ T1056] do_SYSENTER_32+0x73/0x90 [ 1547.351859][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1547.351859][ T1056] [ 1547.351859][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1547.351859][ T1056] do_recvmmsg+0xbc/0x2300 [ 1547.351859][ T1056] do_recvmmsg+0xbc/0x2300 [ 1548.699363][ T1056] not chained 410000 origins [ 1548.701860][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1548.701860][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.701860][ T1056] Call Trace: [ 1548.701860][ T1056] dump_stack+0x21c/0x280 [ 1548.701860][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1548.701860][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1548.701860][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1548.701860][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1548.701860][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1548.763171][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1548.763171][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1548.763171][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1548.763171][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1548.763171][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1548.763171][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1548.763171][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1548.763171][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1548.763171][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1548.763171][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1548.763171][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1548.763171][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] RIP: 0023:0xf7fa1549 [ 1548.763171][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1548.763171][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1548.763171][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1548.763171][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1548.763171][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1548.763171][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1548.763171][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1548.763171][ T1056] Uninit was stored to memory at: [ 1548.763171][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] [ 1548.763171][ T1056] Uninit was stored to memory at: [ 1548.763171][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] [ 1548.763171][ T1056] Uninit was stored to memory at: [ 1548.763171][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] [ 1548.763171][ T1056] Uninit was stored to memory at: [ 1548.763171][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] [ 1548.763171][ T1056] Uninit was stored to memory at: [ 1548.763171][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] [ 1548.763171][ T1056] Uninit was stored to memory at: [ 1548.763171][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] [ 1548.763171][ T1056] Uninit was stored to memory at: [ 1548.763171][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1548.763171][ T1056] __msan_chain_origin+0x57/0xa0 [ 1548.763171][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1548.763171][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1548.763171][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1548.763171][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1548.763171][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1548.763171][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1548.763171][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1548.763171][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1548.763171][ T1056] do_SYSENTER_32+0x73/0x90 [ 1548.763171][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1548.763171][ T1056] [ 1548.763171][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1548.763171][ T1056] do_recvmmsg+0xbc/0x2300 [ 1548.763171][ T1056] do_recvmmsg+0xbc/0x2300 [ 1550.020805][ T1056] not chained 420000 origins [ 1550.021824][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1550.021824][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.021824][ T1056] Call Trace: [ 1550.021824][ T1056] dump_stack+0x21c/0x280 [ 1550.021824][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1550.021824][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1550.021824][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1550.021824][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1550.021824][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1550.021824][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1550.091982][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1550.094637][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1550.094637][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1550.094637][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1550.094637][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1550.094637][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.094637][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.094637][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.094637][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.094637][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1550.094637][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1550.094637][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1550.094637][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1550.094637][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1550.173286][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1550.173286][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.173286][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1550.173286][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1550.173286][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.173286][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.173286][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.173286][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.173286][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.173286][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.173286][ T1056] RIP: 0023:0xf7fa1549 [ 1550.173286][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1550.262811][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1550.262811][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1550.262811][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1550.262811][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1550.294457][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1550.294457][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1550.294457][ T1056] Uninit was stored to memory at: [ 1550.294457][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1550.325127][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.325127][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.325127][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.325127][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.325127][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.352007][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.352007][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.352007][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.352007][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.352007][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.384157][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.384157][ T1056] [ 1550.384157][ T1056] Uninit was stored to memory at: [ 1550.384157][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1550.384157][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.384157][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.384157][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.384157][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.384157][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.384157][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.443556][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.443556][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.443556][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.443556][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.443556][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.473184][ T1056] [ 1550.473184][ T1056] Uninit was stored to memory at: [ 1550.473184][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1550.473184][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.473184][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.504737][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.504737][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.504737][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.504737][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.504737][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.534519][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.534519][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.534519][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.534519][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.534519][ T1056] [ 1550.563022][ T1056] Uninit was stored to memory at: [ 1550.563022][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1550.563022][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.563022][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.563022][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.593192][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.593192][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.593192][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.593192][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.593192][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.624163][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.624163][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.624163][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.624163][ T1056] [ 1550.624163][ T1056] Uninit was stored to memory at: [ 1550.624163][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1550.655893][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.655893][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.655893][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.655893][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.681989][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.681989][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.681989][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.681989][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.681989][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.711973][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.711973][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.711973][ T1056] [ 1550.711973][ T1056] Uninit was stored to memory at: [ 1550.711973][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1550.742052][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.742052][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.742052][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.742052][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.742052][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.772010][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.772010][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.772010][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.772010][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.772010][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.804164][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.804164][ T1056] [ 1550.804164][ T1056] Uninit was stored to memory at: [ 1550.804164][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1550.804164][ T1056] __msan_chain_origin+0x57/0xa0 [ 1550.834051][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1550.834051][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1550.834051][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1550.834051][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1550.834051][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1550.863383][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1550.863383][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1550.863383][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1550.863383][ T1056] do_SYSENTER_32+0x73/0x90 [ 1550.892279][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1550.892279][ T1056] [ 1550.892279][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1550.892279][ T1056] do_recvmmsg+0xbc/0x2300 [ 1550.892279][ T1056] do_recvmmsg+0xbc/0x2300 [ 1551.250403][ T1056] not chained 430000 origins [ 1551.252066][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1551.252066][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.252066][ T1056] Call Trace: [ 1551.252066][ T1056] dump_stack+0x21c/0x280 [ 1551.252066][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1551.252066][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1551.252066][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1551.252066][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1551.252066][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1551.252066][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1551.252066][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1551.252066][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1551.252066][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1551.252066][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1551.252066][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1551.252066][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.252066][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.252066][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.252066][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.252066][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1551.374210][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1551.374210][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1551.374210][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1551.374210][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1551.395778][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1551.395778][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.395778][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1551.395778][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1551.395778][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.395778][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.395778][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.395778][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1551.395778][ T1056] do_SYSENTER_32+0x73/0x90 [ 1551.395778][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.395778][ T1056] RIP: 0023:0xf7fa1549 [ 1551.452078][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1551.452078][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1551.452078][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1551.452078][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1551.452078][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1551.452078][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1551.452078][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1551.452078][ T1056] Uninit was stored to memory at: [ 1551.452078][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1551.452078][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.452078][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.452078][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.452078][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.452078][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.452078][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.452078][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.452078][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.452078][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1551.452078][ T1056] do_SYSENTER_32+0x73/0x90 [ 1551.452078][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.452078][ T1056] [ 1551.452078][ T1056] Uninit was stored to memory at: [ 1551.452078][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1551.452078][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.452078][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.452078][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.452078][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.452078][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.452078][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.452078][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.452078][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.452078][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1551.452078][ T1056] do_SYSENTER_32+0x73/0x90 [ 1551.452078][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.452078][ T1056] [ 1551.452078][ T1056] Uninit was stored to memory at: [ 1551.452078][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1551.452078][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.452078][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.452078][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.452078][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.452078][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.452078][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.452078][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.452078][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.452078][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1551.452078][ T1056] do_SYSENTER_32+0x73/0x90 [ 1551.452078][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.452078][ T1056] [ 1551.452078][ T1056] Uninit was stored to memory at: [ 1551.452078][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1551.452078][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.452078][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.452078][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.452078][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.452078][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.452078][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.452078][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.452078][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.452078][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1551.452078][ T1056] do_SYSENTER_32+0x73/0x90 [ 1551.452078][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.452078][ T1056] [ 1551.452078][ T1056] Uninit was stored to memory at: [ 1551.452078][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1551.452078][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.452078][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.452078][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.452078][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.452078][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.452078][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.452078][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.452078][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.452078][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1551.452078][ T1056] do_SYSENTER_32+0x73/0x90 [ 1551.452078][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.452078][ T1056] [ 1551.452078][ T1056] Uninit was stored to memory at: [ 1551.452078][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1551.452078][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.452078][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.452078][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.452078][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.452078][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.939650][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.939650][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.939650][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.939650][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1551.965782][ T1056] do_SYSENTER_32+0x73/0x90 [ 1551.965782][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1551.965782][ T1056] [ 1551.965782][ T1056] Uninit was stored to memory at: [ 1551.965782][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1551.965782][ T1056] __msan_chain_origin+0x57/0xa0 [ 1551.965782][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1551.965782][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1551.965782][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1551.965782][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1551.965782][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1551.965782][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1551.965782][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1551.965782][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.042437][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.042437][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.042437][ T1056] [ 1552.042437][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1552.042437][ T1056] do_recvmmsg+0xbc/0x2300 [ 1552.042437][ T1056] do_recvmmsg+0xbc/0x2300 [ 1552.394503][ T1056] not chained 440000 origins [ 1552.399144][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1552.401814][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.401814][ T1056] Call Trace: [ 1552.401814][ T1056] dump_stack+0x21c/0x280 [ 1552.421937][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1552.421937][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1552.421937][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1552.421937][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1552.421937][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1552.452103][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1552.452103][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1552.452103][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1552.452103][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1552.452103][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1552.452103][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1552.452103][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.452103][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.452103][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.452103][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.452103][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1552.452103][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1552.452103][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1552.452103][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1552.452103][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1552.452103][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1552.452103][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.452103][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1552.452103][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1552.452103][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.452103][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.452103][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.452103][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.452103][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.452103][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.452103][ T1056] RIP: 0023:0xf7fa1549 [ 1552.452103][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1552.452103][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1552.452103][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1552.452103][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1552.452103][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1552.452103][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1552.668461][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1552.668461][ T1056] Uninit was stored to memory at: [ 1552.668461][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1552.668461][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.668461][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.668461][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.668461][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.668461][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.668461][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.668461][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.668461][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.668461][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.668461][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.668461][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.668461][ T1056] [ 1552.668461][ T1056] Uninit was stored to memory at: [ 1552.668461][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1552.668461][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.668461][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.668461][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.668461][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.668461][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.668461][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.668461][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.668461][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.668461][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.668461][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.668461][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.668461][ T1056] [ 1552.668461][ T1056] Uninit was stored to memory at: [ 1552.668461][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1552.668461][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.668461][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.668461][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.668461][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.668461][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.668461][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.668461][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.668461][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.668461][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.668461][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.668461][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.668461][ T1056] [ 1552.668461][ T1056] Uninit was stored to memory at: [ 1552.668461][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1552.668461][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.668461][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.668461][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.668461][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.668461][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.668461][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.668461][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.668461][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.668461][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.668461][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.668461][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.668461][ T1056] [ 1552.668461][ T1056] Uninit was stored to memory at: [ 1552.668461][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1552.668461][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.668461][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.668461][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.668461][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.668461][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.668461][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.668461][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.668461][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.668461][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.668461][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.668461][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.668461][ T1056] [ 1552.668461][ T1056] Uninit was stored to memory at: [ 1552.668461][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1552.668461][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.668461][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.668461][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.668461][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.668461][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.668461][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.668461][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.668461][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.668461][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.668461][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.668461][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.668461][ T1056] [ 1552.668461][ T1056] Uninit was stored to memory at: [ 1552.668461][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1552.668461][ T1056] __msan_chain_origin+0x57/0xa0 [ 1552.668461][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1552.668461][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1552.668461][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1552.668461][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1552.668461][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1552.668461][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1552.668461][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1552.668461][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1552.668461][ T1056] do_SYSENTER_32+0x73/0x90 [ 1552.668461][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1552.668461][ T1056] [ 1552.668461][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1552.668461][ T1056] do_recvmmsg+0xbc/0x2300 [ 1552.668461][ T1056] do_recvmmsg+0xbc/0x2300 [ 1553.581481][ T1056] not chained 450000 origins [ 1553.581829][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1553.581829][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1553.581829][ T1056] Call Trace: [ 1553.581829][ T1056] dump_stack+0x21c/0x280 [ 1553.581829][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1553.581829][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1553.581829][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1553.581829][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1553.581829][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1553.581829][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1553.581829][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1553.581829][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1553.581829][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1553.581829][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1553.581829][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1553.677617][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.677617][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.677617][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.677617][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.677617][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1553.677617][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1553.677617][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1553.677617][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1553.677617][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1553.677617][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1553.677617][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.677617][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1553.677617][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1553.677617][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.677617][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.677617][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.677617][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.677617][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.677617][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.677617][ T1056] RIP: 0023:0xf7fa1549 [ 1553.677617][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1553.677617][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1553.677617][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1553.677617][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1553.677617][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1553.677617][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1553.677617][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1553.872023][ T1056] Uninit was stored to memory at: [ 1553.872023][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1553.872023][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.872023][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.872023][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.872023][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.903620][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.903620][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.903620][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.903620][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.903620][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.934434][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.934434][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.934434][ T1056] [ 1553.934434][ T1056] Uninit was stored to memory at: [ 1553.934434][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1553.934434][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.934434][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.934434][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.934434][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.934434][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.934434][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.934434][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.934434][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.934434][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.934434][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.934434][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.934434][ T1056] [ 1553.934434][ T1056] Uninit was stored to memory at: [ 1553.934434][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1553.934434][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.934434][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.934434][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.934434][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.934434][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.934434][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.934434][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.934434][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.934434][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.934434][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.934434][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.934434][ T1056] [ 1553.934434][ T1056] Uninit was stored to memory at: [ 1553.934434][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1553.934434][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.934434][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.934434][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.934434][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.934434][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.934434][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.934434][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.934434][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.934434][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.934434][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.934434][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.934434][ T1056] [ 1553.934434][ T1056] Uninit was stored to memory at: [ 1553.934434][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1553.934434][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.934434][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.934434][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.934434][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.934434][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.934434][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.934434][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.934434][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.934434][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.934434][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.934434][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.934434][ T1056] [ 1553.934434][ T1056] Uninit was stored to memory at: [ 1553.934434][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1553.934434][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.934434][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.934434][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.934434][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.934434][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.934434][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.934434][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.934434][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.934434][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.934434][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.934434][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.934434][ T1056] [ 1553.934434][ T1056] Uninit was stored to memory at: [ 1553.934434][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1553.934434][ T1056] __msan_chain_origin+0x57/0xa0 [ 1553.934434][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1553.934434][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1553.934434][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1553.934434][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1553.934434][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1553.934434][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1553.934434][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1553.934434][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1553.934434][ T1056] do_SYSENTER_32+0x73/0x90 [ 1553.934434][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1553.934434][ T1056] [ 1553.934434][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1553.934434][ T1056] do_recvmmsg+0xbc/0x2300 [ 1553.934434][ T1056] do_recvmmsg+0xbc/0x2300 [ 1554.901863][ T1056] not chained 460000 origins [ 1554.902403][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1554.902403][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.902403][ T1056] Call Trace: [ 1554.902403][ T1056] dump_stack+0x21c/0x280 [ 1554.902403][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1554.902403][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1554.902403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1554.902403][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1554.902403][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1554.902403][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1554.902403][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1554.902403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1554.902403][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1554.902403][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1554.902403][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1554.902403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1554.902403][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1554.902403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1554.902403][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1554.902403][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1554.902403][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1554.902403][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] RIP: 0023:0xf7fa1549 [ 1554.902403][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1554.902403][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1554.902403][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1554.902403][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1554.902403][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1554.902403][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1554.902403][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1554.902403][ T1056] Uninit was stored to memory at: [ 1554.902403][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] [ 1554.902403][ T1056] Uninit was stored to memory at: [ 1554.902403][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] [ 1554.902403][ T1056] Uninit was stored to memory at: [ 1554.902403][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] [ 1554.902403][ T1056] Uninit was stored to memory at: [ 1554.902403][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] [ 1554.902403][ T1056] Uninit was stored to memory at: [ 1554.902403][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] [ 1554.902403][ T1056] Uninit was stored to memory at: [ 1554.902403][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] [ 1554.902403][ T1056] Uninit was stored to memory at: [ 1554.902403][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1554.902403][ T1056] __msan_chain_origin+0x57/0xa0 [ 1554.902403][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1554.902403][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1554.902403][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1554.902403][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1554.902403][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1554.902403][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1554.902403][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1554.902403][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1554.902403][ T1056] do_SYSENTER_32+0x73/0x90 [ 1554.902403][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1554.902403][ T1056] [ 1554.902403][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1554.902403][ T1056] do_recvmmsg+0xbc/0x2300 [ 1554.902403][ T1056] do_recvmmsg+0xbc/0x2300 [ 1556.069311][ T1056] not chained 470000 origins [ 1556.071826][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1556.071826][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.071826][ T1056] Call Trace: [ 1556.071826][ T1056] dump_stack+0x21c/0x280 [ 1556.071826][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1556.071826][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1556.071826][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1556.071826][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1556.071826][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1556.131944][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1556.131944][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1556.131944][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1556.131944][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1556.131944][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1556.131944][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1556.131944][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.131944][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.131944][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.131944][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.131944][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1556.131944][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1556.202905][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1556.202905][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1556.202905][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1556.202905][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1556.202905][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.202905][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1556.233489][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] RIP: 0023:0xf7fa1549 [ 1556.233489][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1556.233489][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1556.233489][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1556.233489][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1556.233489][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1556.233489][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1556.233489][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1556.233489][ T1056] Uninit was stored to memory at: [ 1556.233489][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1556.233489][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.233489][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.233489][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.233489][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.233489][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] [ 1556.233489][ T1056] Uninit was stored to memory at: [ 1556.233489][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1556.233489][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.233489][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.233489][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.233489][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.233489][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] [ 1556.233489][ T1056] Uninit was stored to memory at: [ 1556.233489][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1556.233489][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.233489][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.233489][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.233489][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.233489][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] [ 1556.233489][ T1056] Uninit was stored to memory at: [ 1556.233489][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1556.233489][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.233489][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.233489][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.233489][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.233489][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] [ 1556.233489][ T1056] Uninit was stored to memory at: [ 1556.233489][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1556.233489][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.233489][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.233489][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.233489][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.233489][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] [ 1556.233489][ T1056] Uninit was stored to memory at: [ 1556.233489][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1556.233489][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.233489][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.233489][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.233489][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.233489][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] [ 1556.233489][ T1056] Uninit was stored to memory at: [ 1556.233489][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1556.233489][ T1056] __msan_chain_origin+0x57/0xa0 [ 1556.233489][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1556.233489][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1556.233489][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1556.233489][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1556.233489][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1556.233489][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1556.233489][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1556.233489][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1556.233489][ T1056] do_SYSENTER_32+0x73/0x90 [ 1556.233489][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1556.233489][ T1056] [ 1556.233489][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1556.233489][ T1056] do_recvmmsg+0xbc/0x2300 [ 1556.233489][ T1056] do_recvmmsg+0xbc/0x2300 [ 1557.181747][ T1056] not chained 480000 origins [ 1557.181845][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1557.181845][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.181845][ T1056] Call Trace: [ 1557.208847][ T1056] dump_stack+0x21c/0x280 [ 1557.208847][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1557.208847][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1557.208847][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1557.208847][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1557.208847][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1557.208847][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1557.208847][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1557.208847][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1557.208847][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1557.263646][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1557.263646][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1557.263646][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1557.263646][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1557.263646][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1557.263646][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1557.263646][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1557.263646][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] RIP: 0023:0xf7fa1549 [ 1557.263646][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1557.263646][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1557.263646][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1557.263646][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1557.263646][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1557.263646][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1557.263646][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1557.263646][ T1056] Uninit was stored to memory at: [ 1557.263646][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] [ 1557.263646][ T1056] Uninit was stored to memory at: [ 1557.263646][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] [ 1557.263646][ T1056] Uninit was stored to memory at: [ 1557.263646][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] [ 1557.263646][ T1056] Uninit was stored to memory at: [ 1557.263646][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] [ 1557.263646][ T1056] Uninit was stored to memory at: [ 1557.263646][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] [ 1557.263646][ T1056] Uninit was stored to memory at: [ 1557.263646][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] [ 1557.263646][ T1056] Uninit was stored to memory at: [ 1557.263646][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1557.263646][ T1056] __msan_chain_origin+0x57/0xa0 [ 1557.263646][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1557.263646][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1557.263646][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1557.263646][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1557.263646][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1557.263646][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1557.263646][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1557.263646][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1557.263646][ T1056] do_SYSENTER_32+0x73/0x90 [ 1557.263646][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1557.263646][ T1056] [ 1557.263646][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1557.263646][ T1056] do_recvmmsg+0xbc/0x2300 [ 1557.263646][ T1056] do_recvmmsg+0xbc/0x2300 [ 1558.331771][ T1056] not chained 490000 origins [ 1558.331829][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1558.331829][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.331829][ T1056] Call Trace: [ 1558.331829][ T1056] dump_stack+0x21c/0x280 [ 1558.331829][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1558.331829][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1558.331829][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1558.331829][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1558.331829][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1558.388000][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1558.388000][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1558.388000][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1558.388000][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1558.412219][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1558.412219][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1558.412219][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.412219][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.412219][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1558.442109][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1558.442109][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1558.442109][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1558.442109][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1558.442109][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1558.442109][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] RIP: 0023:0xf7fa1549 [ 1558.442109][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1558.442109][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1558.442109][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1558.442109][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1558.442109][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1558.442109][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1558.442109][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1558.442109][ T1056] Uninit was stored to memory at: [ 1558.442109][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1558.442109][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.442109][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.442109][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] [ 1558.442109][ T1056] Uninit was stored to memory at: [ 1558.442109][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1558.442109][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.442109][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.442109][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] [ 1558.442109][ T1056] Uninit was stored to memory at: [ 1558.442109][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1558.442109][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.442109][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.442109][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] [ 1558.442109][ T1056] Uninit was stored to memory at: [ 1558.442109][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1558.442109][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.442109][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.442109][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] [ 1558.442109][ T1056] Uninit was stored to memory at: [ 1558.442109][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1558.442109][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.442109][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.442109][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] [ 1558.442109][ T1056] Uninit was stored to memory at: [ 1558.442109][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1558.442109][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.442109][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.442109][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] [ 1558.442109][ T1056] Uninit was stored to memory at: [ 1558.442109][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1558.442109][ T1056] __msan_chain_origin+0x57/0xa0 [ 1558.442109][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1558.442109][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1558.442109][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1558.442109][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1558.442109][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1558.442109][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1558.442109][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1558.442109][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1558.442109][ T1056] do_SYSENTER_32+0x73/0x90 [ 1558.442109][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1558.442109][ T1056] [ 1558.442109][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1558.442109][ T1056] do_recvmmsg+0xbc/0x2300 [ 1558.442109][ T1056] do_recvmmsg+0xbc/0x2300 [ 1559.401757][ T1056] not chained 500000 origins [ 1559.401936][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1559.401936][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.401936][ T1056] Call Trace: [ 1559.401936][ T1056] dump_stack+0x21c/0x280 [ 1559.401936][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1559.401936][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1559.401936][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1559.401936][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1559.401936][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1559.401936][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1559.401936][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1559.401936][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1559.401936][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1559.401936][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1559.401936][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1559.401936][ T1056] __msan_chain_origin+0x57/0xa0 [ 1559.401936][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1559.401936][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1559.401936][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1559.514886][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1559.514886][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1559.514886][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1559.532142][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1559.532142][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1559.532142][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1559.532142][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1559.532142][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1559.532142][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1559.532142][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.532142][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.532142][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1559.532142][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1559.532142][ T1056] do_SYSENTER_32+0x73/0x90 [ 1559.532142][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.532142][ T1056] RIP: 0023:0xf7fa1549 [ 1559.532142][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1559.532142][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1559.532142][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1559.532142][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1559.532142][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1559.532142][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1559.532142][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1559.532142][ T1056] Uninit was stored to memory at: [ 1559.532142][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1559.532142][ T1056] __msan_chain_origin+0x57/0xa0 [ 1559.532142][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1559.692049][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1559.692049][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1559.692049][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1559.692049][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.692049][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.692049][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1559.692049][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1559.692049][ T1056] do_SYSENTER_32+0x73/0x90 [ 1559.692049][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.692049][ T1056] [ 1559.692049][ T1056] Uninit was stored to memory at: [ 1559.692049][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1559.692049][ T1056] __msan_chain_origin+0x57/0xa0 [ 1559.692049][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1559.692049][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1559.692049][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1559.692049][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1559.692049][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.692049][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.792044][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1559.792044][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1559.792044][ T1056] do_SYSENTER_32+0x73/0x90 [ 1559.792044][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.792044][ T1056] [ 1559.792044][ T1056] Uninit was stored to memory at: [ 1559.792044][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1559.792044][ T1056] __msan_chain_origin+0x57/0xa0 [ 1559.792044][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1559.792044][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1559.792044][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1559.792044][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1559.792044][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.792044][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.792044][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1559.792044][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1559.792044][ T1056] do_SYSENTER_32+0x73/0x90 [ 1559.792044][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.882096][ T1056] [ 1559.882096][ T1056] Uninit was stored to memory at: [ 1559.882096][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1559.882096][ T1056] __msan_chain_origin+0x57/0xa0 [ 1559.882096][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1559.882096][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1559.912025][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1559.912025][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1559.912025][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.912025][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1559.912025][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1559.912025][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1559.942125][ T1056] do_SYSENTER_32+0x73/0x90 [ 1559.942125][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1559.942125][ T1056] [ 1559.942125][ T1056] Uninit was stored to memory at: [ 1559.942125][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1559.942125][ T1056] __msan_chain_origin+0x57/0xa0 [ 1559.942125][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1559.942125][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1559.942125][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1559.942125][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1559.942125][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1559.942125][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.002274][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.002274][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.002274][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.002274][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.002274][ T1056] [ 1560.002274][ T1056] Uninit was stored to memory at: [ 1560.032063][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1560.032063][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.032063][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1560.032063][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1560.032063][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1560.032063][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1560.062080][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.062080][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.062080][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.062080][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.062080][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.062080][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.092965][ T1056] [ 1560.092965][ T1056] Uninit was stored to memory at: [ 1560.092965][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1560.092965][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.092965][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1560.092965][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1560.122079][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1560.122079][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1560.122079][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.122079][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.122079][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.152095][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.152095][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.152095][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.152095][ T1056] [ 1560.152095][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1560.152095][ T1056] do_recvmmsg+0xbc/0x2300 [ 1560.182068][ T1056] do_recvmmsg+0xbc/0x2300 [ 1560.484776][ T1056] not chained 510000 origins [ 1560.489398][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1560.492045][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.492045][ T1056] Call Trace: [ 1560.492045][ T1056] dump_stack+0x21c/0x280 [ 1560.492045][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1560.492045][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1560.492045][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1560.492045][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1560.492045][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1560.542025][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1560.542025][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1560.542025][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1560.542025][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1560.542025][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1560.542025][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1560.542025][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.542025][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1560.542025][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1560.542025][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1560.542025][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1560.542025][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1560.542025][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1560.542025][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1560.542025][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1560.542025][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1560.542025][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1560.542025][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1560.542025][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1560.542025][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.542025][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.542025][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.542025][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.542025][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.542025][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.542025][ T1056] RIP: 0023:0xf7fa1549 [ 1560.542025][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1560.542025][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1560.542025][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1560.542025][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.542025][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1560.542025][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1560.542025][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.743926][ T1056] Uninit was stored to memory at: [ 1560.743926][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1560.743926][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.743926][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1560.743926][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1560.743926][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1560.743926][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1560.743926][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.743926][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.743926][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.743926][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.743926][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.743926][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.743926][ T1056] [ 1560.743926][ T1056] Uninit was stored to memory at: [ 1560.743926][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1560.743926][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.743926][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1560.743926][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1560.743926][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1560.743926][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1560.743926][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.743926][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.743926][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.743926][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.743926][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.743926][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.743926][ T1056] [ 1560.743926][ T1056] Uninit was stored to memory at: [ 1560.743926][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1560.743926][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.743926][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1560.743926][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1560.743926][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1560.743926][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1560.743926][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.743926][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.743926][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.743926][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.743926][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.743926][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.743926][ T1056] [ 1560.743926][ T1056] Uninit was stored to memory at: [ 1560.743926][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1560.743926][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.743926][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1560.743926][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1560.743926][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1560.743926][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1560.743926][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1560.743926][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1560.743926][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1560.743926][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1560.743926][ T1056] do_SYSENTER_32+0x73/0x90 [ 1560.743926][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1560.743926][ T1056] [ 1560.743926][ T1056] Uninit was stored to memory at: [ 1560.743926][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1560.743926][ T1056] __msan_chain_origin+0x57/0xa0 [ 1560.743926][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.052346][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.052346][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.052346][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.052346][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.052346][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.052346][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.052346][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.052346][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.052346][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.052346][ T1056] [ 1561.052346][ T1056] Uninit was stored to memory at: [ 1561.052346][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.052346][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.052346][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.052346][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.052346][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.052346][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.052346][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.052346][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.052346][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.052346][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.052346][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.052346][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.052346][ T1056] [ 1561.052346][ T1056] Uninit was stored to memory at: [ 1561.052346][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.052346][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.052346][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.052346][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.052346][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.052346][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.052346][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.052346][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.052346][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.052346][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.052346][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.052346][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.052346][ T1056] [ 1561.052346][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1561.052346][ T1056] do_recvmmsg+0xbc/0x2300 [ 1561.052346][ T1056] do_recvmmsg+0xbc/0x2300 [ 1561.540709][ T1056] not chained 520000 origins [ 1561.541824][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1561.541824][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.563004][ T1056] Call Trace: [ 1561.563004][ T1056] dump_stack+0x21c/0x280 [ 1561.563004][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1561.563004][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1561.563004][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1561.563004][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1561.563004][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1561.563004][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1561.563004][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1561.563004][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1561.563004][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1561.563004][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1561.563004][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1561.563004][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1561.563004][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1561.563004][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1561.563004][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1561.563004][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1561.563004][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] RIP: 0023:0xf7fa1549 [ 1561.563004][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1561.563004][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1561.563004][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1561.563004][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1561.563004][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1561.563004][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1561.563004][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1561.563004][ T1056] Uninit was stored to memory at: [ 1561.563004][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] [ 1561.563004][ T1056] Uninit was stored to memory at: [ 1561.563004][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] [ 1561.563004][ T1056] Uninit was stored to memory at: [ 1561.563004][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] [ 1561.563004][ T1056] Uninit was stored to memory at: [ 1561.563004][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] [ 1561.563004][ T1056] Uninit was stored to memory at: [ 1561.563004][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] [ 1561.563004][ T1056] Uninit was stored to memory at: [ 1561.563004][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] [ 1561.563004][ T1056] Uninit was stored to memory at: [ 1561.563004][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1561.563004][ T1056] __msan_chain_origin+0x57/0xa0 [ 1561.563004][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1561.563004][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1561.563004][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1561.563004][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1561.563004][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1561.563004][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1561.563004][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1561.563004][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1561.563004][ T1056] do_SYSENTER_32+0x73/0x90 [ 1561.563004][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1561.563004][ T1056] [ 1561.563004][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1561.563004][ T1056] do_recvmmsg+0xbc/0x2300 [ 1561.563004][ T1056] do_recvmmsg+0xbc/0x2300 [ 1562.666017][ T1056] not chained 530000 origins [ 1562.671845][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1562.672413][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.672413][ T1056] Call Trace: [ 1562.672413][ T1056] dump_stack+0x21c/0x280 [ 1562.672413][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1562.672413][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1562.672413][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1562.672413][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1562.672413][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1562.672413][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1562.672413][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1562.672413][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1562.672413][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1562.672413][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1562.672413][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1562.672413][ T1056] __msan_chain_origin+0x57/0xa0 [ 1562.672413][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1562.672413][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1562.672413][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1562.672413][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1562.672413][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1562.672413][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1562.672413][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1562.672413][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1562.672413][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1562.672413][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1562.672413][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1562.672413][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1562.672413][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.672413][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.672413][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1562.672413][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1562.672413][ T1056] do_SYSENTER_32+0x73/0x90 [ 1562.672413][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.672413][ T1056] RIP: 0023:0xf7fa1549 [ 1562.672413][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1562.672413][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1562.672413][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1562.672413][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1562.672413][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1562.672413][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1562.672413][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1562.672413][ T1056] Uninit was stored to memory at: [ 1562.672413][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1562.672413][ T1056] __msan_chain_origin+0x57/0xa0 [ 1562.672413][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1562.672413][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1562.672413][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1562.672413][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1562.672413][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1562.672413][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1562.672413][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1562.672413][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1562.672413][ T1056] do_SYSENTER_32+0x73/0x90 [ 1562.672413][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1562.672413][ T1056] [ 1562.672413][ T1056] Uninit was stored to memory at: [ 1563.032116][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1563.032116][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.032116][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.032116][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.032116][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.032116][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.032116][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.032116][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.032116][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.032116][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1563.032116][ T1056] do_SYSENTER_32+0x73/0x90 [ 1563.032116][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.032116][ T1056] [ 1563.032116][ T1056] Uninit was stored to memory at: [ 1563.032116][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1563.032116][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.032116][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.032116][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.032116][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.032116][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.032116][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.032116][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.032116][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.032116][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1563.032116][ T1056] do_SYSENTER_32+0x73/0x90 [ 1563.032116][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.032116][ T1056] [ 1563.032116][ T1056] Uninit was stored to memory at: [ 1563.032116][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1563.032116][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.032116][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.032116][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.032116][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.032116][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.032116][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.032116][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.032116][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.032116][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1563.032116][ T1056] do_SYSENTER_32+0x73/0x90 [ 1563.032116][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.032116][ T1056] [ 1563.032116][ T1056] Uninit was stored to memory at: [ 1563.032116][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1563.032116][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.032116][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.032116][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.032116][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.032116][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.032116][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.032116][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.032116][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.032116][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1563.032116][ T1056] do_SYSENTER_32+0x73/0x90 [ 1563.032116][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.032116][ T1056] [ 1563.032116][ T1056] Uninit was stored to memory at: [ 1563.032116][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1563.032116][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.032116][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.032116][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.032116][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.032116][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.032116][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.032116][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.032116][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.032116][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1563.032116][ T1056] do_SYSENTER_32+0x73/0x90 [ 1563.032116][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.032116][ T1056] [ 1563.032116][ T1056] Uninit was stored to memory at: [ 1563.032116][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1563.032116][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.032116][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.032116][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.032116][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.032116][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.032116][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.032116][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.032116][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.032116][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1563.032116][ T1056] do_SYSENTER_32+0x73/0x90 [ 1563.032116][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.032116][ T1056] [ 1563.032116][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1563.032116][ T1056] do_recvmmsg+0xbc/0x2300 [ 1563.032116][ T1056] do_recvmmsg+0xbc/0x2300 [ 1563.838559][ T1056] not chained 540000 origins [ 1563.841832][ T1056] CPU: 1 PID: 1056 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1563.841832][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.841832][ T1056] Call Trace: [ 1563.841832][ T1056] dump_stack+0x21c/0x280 [ 1563.841832][ T1056] kmsan_internal_chain_origin+0x6f/0x130 [ 1563.841832][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1563.841832][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1563.841832][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1563.841832][ T1056] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1563.841832][ T1056] ? unix_dgram_recvmsg+0x1a0a/0x1c20 [ 1563.841832][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1563.841832][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1563.841832][ T1056] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1563.917541][ T1056] ? _copy_from_user+0x1cd/0x2d0 [ 1563.917541][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1563.931995][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.931995][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.931995][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.931995][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.931995][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1563.931995][ T1056] ? kmsan_internal_check_memory+0xb1/0x520 [ 1563.931995][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1563.931995][ T1056] ? kmsan_internal_set_origin+0x85/0xc0 [ 1563.931995][ T1056] ? __msan_poison_alloca+0xe9/0x110 [ 1563.931995][ T1056] ? __sys_recvmmsg+0xb5/0x5f0 [ 1563.931995][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.931995][ T1056] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1563.931995][ T1056] ? kmsan_get_metadata+0x116/0x180 [ 1563.931995][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.931995][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.931995][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.931995][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1563.931995][ T1056] do_SYSENTER_32+0x73/0x90 [ 1563.931995][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1563.931995][ T1056] RIP: 0023:0xf7fa1549 [ 1563.931995][ T1056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1563.931995][ T1056] RSP: 002b:00000000f557a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1563.931995][ T1056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002bc0 [ 1563.931995][ T1056] RDX: 00000000040000fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1563.931995][ T1056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1563.931995][ T1056] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1563.931995][ T1056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1563.931995][ T1056] Uninit was stored to memory at: [ 1563.931995][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1563.931995][ T1056] __msan_chain_origin+0x57/0xa0 [ 1563.931995][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1563.931995][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1563.931995][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1563.931995][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1563.931995][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1563.931995][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1563.931995][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1563.931995][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1564.174219][ T1056] do_SYSENTER_32+0x73/0x90 [ 1564.174219][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.174219][ T1056] [ 1564.174219][ T1056] Uninit was stored to memory at: [ 1564.174219][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1564.202807][ T1056] __msan_chain_origin+0x57/0xa0 [ 1564.204770][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1564.204770][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1564.204770][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1564.204770][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1564.204770][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.204770][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.204770][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1564.204770][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1564.204770][ T1056] do_SYSENTER_32+0x73/0x90 [ 1564.204770][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.204770][ T1056] [ 1564.204770][ T1056] Uninit was stored to memory at: [ 1564.204770][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1564.204770][ T1056] __msan_chain_origin+0x57/0xa0 [ 1564.204770][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1564.204770][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1564.204770][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1564.204770][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1564.204770][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.204770][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.204770][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1564.204770][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1564.204770][ T1056] do_SYSENTER_32+0x73/0x90 [ 1564.204770][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.204770][ T1056] [ 1564.204770][ T1056] Uninit was stored to memory at: [ 1564.204770][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1564.353041][ T1056] __msan_chain_origin+0x57/0xa0 [ 1564.353041][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1564.353041][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1564.353041][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1564.353041][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1564.353041][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.383313][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.383313][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1564.383313][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1564.383313][ T1056] do_SYSENTER_32+0x73/0x90 [ 1564.383313][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.412085][ T1056] [ 1564.412085][ T1056] Uninit was stored to memory at: [ 1564.412085][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1564.412085][ T1056] __msan_chain_origin+0x57/0xa0 [ 1564.412085][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1564.412085][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1564.443278][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1564.443278][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1564.443278][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.443278][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.443278][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1564.443278][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1564.443278][ T1056] do_SYSENTER_32+0x73/0x90 [ 1564.443278][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.443278][ T1056] [ 1564.443278][ T1056] Uninit was stored to memory at: [ 1564.443278][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1564.502054][ T1056] __msan_chain_origin+0x57/0xa0 [ 1564.502054][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1564.502054][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1564.502054][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1564.502054][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1564.502054][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.533556][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.533556][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1564.533556][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1564.533556][ T1056] do_SYSENTER_32+0x73/0x90 [ 1564.533556][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.562413][ T1056] [ 1564.562413][ T1056] Uninit was stored to memory at: [ 1564.562413][ T1056] kmsan_internal_chain_origin+0xad/0x130 [ 1564.562413][ T1056] __msan_chain_origin+0x57/0xa0 [ 1564.562413][ T1056] __get_compat_msghdr+0x6db/0x9d0 [ 1564.562413][ T1056] get_compat_msghdr+0x108/0x2b0 [ 1564.592756][ T1056] do_recvmmsg+0xdaf/0x2300 [ 1564.592756][ T1056] __sys_recvmmsg+0x340/0x5f0 [ 1564.592756][ T1056] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1564.592756][ T1056] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1564.592756][ T1056] __do_fast_syscall_32+0x102/0x160 [ 1564.622172][ T1056] do_fast_syscall_32+0x6a/0xc0 [ 1564.622172][ T1056] do_SYSENTER_32+0x73/0x90 [ 1564.622172][ T1056] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1564.622172][ T1056] [ 1564.622172][ T1056] Local variable ----msg_sys@do_recvmmsg created at: [ 1564.622172][ T1056] do_recvmmsg+0xbc/0x2300 [ 1564.653090][ T1056] do_recvmmsg+0xbc/0x2300 22:21:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300040003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 22:21:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getpeername$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}]}, &(0x7f0000000180)=0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 22:21:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:21:43 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 22:21:43 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/168, 0xa8}, {0x0}], 0x2, 0x800000, 0x0) sync_file_range(0xffffffffffffffff, 0x2, 0x7ff, 0x2) 22:21:43 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1565.577399][ T1122] netem: change failed [ 1565.631622][ T1126] netem: change failed 22:21:44 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @private, 0x0, 0x0, 'rr\x00'}, {@multicast2}}, 0x44) 22:21:44 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 22:21:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r0, &(0x7f0000000040)=@generic={0x0, "b6611b6b2883526d64d82b38e9010c96b915c9134c9295d167e0438ca7900a726eb5ae1c82abccec699f8454b5d63efa1a7a725a7ba994ccd9f62722709f5f439d0463492d78fb12ea68465e6849b759bf7f5a0e8d8f30fcd58500362669eb2349521e76dae743e985ed82577e77e2a1e5a279f5744f6737da124e062dca"}, 0x80) 22:21:45 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/168, 0xa8}, {0x0}], 0x2, 0x800000, 0x0) sync_file_range(0xffffffffffffffff, 0x2, 0x7ff, 0x2) 22:21:45 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r0, &(0x7f0000000040)=@generic={0x0, "b6611b6b2883526d64d82b38e9010c96b915c9134c9295d167e0438ca7900a726eb5ae1c82abccec699f8454b5d63efa1a7a725a7ba994ccd9f62722709f5f439d0463492d78fb12ea68465e6849b759bf7f5a0e8d8f30fcd58500362669eb2349521e76dae743e985ed82577e77e2a1e5a279f5744f6737da124e062dca"}, 0x80) 22:21:46 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@local}, {}, {}, 0x8}, {{@in=@empty}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1569.757210][ T1152] netem: change failed [ 1573.907896][ T1180] IPVS: ftp: loaded support on port[0] = 21 [ 1574.985794][ T1180] chnl_net:caif_netlink_parms(): no params data found [ 1575.053808][T11705] Bluetooth: hci4: command 0x0409 tx timeout [ 1575.196236][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.204191][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.216410][ T1180] device bridge_slave_0 entered promiscuous mode [ 1575.257915][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.265906][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.279711][ T1180] device bridge_slave_1 entered promiscuous mode [ 1575.372920][ T1180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.409556][ T1180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.500844][ T1180] team0: Port device team_slave_0 added [ 1575.528333][ T1180] team0: Port device team_slave_1 added [ 1575.610381][ T1180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.620134][ T1180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.646360][ T1180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.668631][ T1180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.677196][ T1180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.703428][ T1180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.795027][ T1180] device hsr_slave_0 entered promiscuous mode [ 1575.814234][ T1180] device hsr_slave_1 entered promiscuous mode [ 1575.830662][ T1180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1575.838783][ T1180] Cannot create hsr debugfs directory [ 1577.132269][ T8497] Bluetooth: hci4: command 0x041b tx timeout [ 1577.325983][ T1180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.374359][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1577.385236][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1577.416106][ T1180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.446470][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1577.457418][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1577.467357][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.475642][ T8501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.559946][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1577.570339][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1577.582967][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1577.592912][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.600160][ T8501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.610002][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1577.623290][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1577.710536][ T1180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1577.721434][ T1180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1578.693434][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1578.705219][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1578.718897][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1578.730350][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1578.741161][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1578.752103][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1578.764848][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1578.775098][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1578.793092][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1578.804699][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1578.861275][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1578.871465][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1578.936873][ T1180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.212411][T11705] Bluetooth: hci4: command 0x040f tx timeout [ 1579.213748][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1579.230481][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1579.321409][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1579.333607][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1579.364933][ T1180] device veth0_vlan entered promiscuous mode [ 1579.383591][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1579.393859][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1579.438052][ T1180] device veth1_vlan entered promiscuous mode [ 1580.132748][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1580.142697][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1580.248098][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1580.258663][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1580.289182][ T1180] device veth0_macvtap entered promiscuous mode [ 1580.330692][ T1180] device veth1_macvtap entered promiscuous mode [ 1580.383343][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.394236][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.404357][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.414999][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.426071][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.436704][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.448042][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.458696][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.470013][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.481435][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.492728][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1580.504069][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.519165][ T1180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.533781][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1580.544038][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1580.554087][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1580.565372][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1580.598631][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1580.611723][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.623532][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1580.635050][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.645697][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1580.656674][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.667154][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1580.677796][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.689002][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1580.699751][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.710048][ T1180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1580.720769][ T1180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.736016][ T1180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.749796][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1580.760709][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1581.290378][ T8296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.299072][ T8296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.311247][ T8949] Bluetooth: hci4: command 0x0419 tx timeout [ 1581.378596][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1582.168344][ T8296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.179916][ T8296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.231834][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1582.488855][ T1416] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1582.497335][ T1416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:22:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300040003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 22:22:01 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @private, 0x0, 0x0, 'rr\x00'}, {@multicast2}}, 0x44) 22:22:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r0, &(0x7f0000000040)=@generic={0x0, "b6611b6b2883526d64d82b38e9010c96b915c9134c9295d167e0438ca7900a726eb5ae1c82abccec699f8454b5d63efa1a7a725a7ba994ccd9f62722709f5f439d0463492d78fb12ea68465e6849b759bf7f5a0e8d8f30fcd58500362669eb2349521e76dae743e985ed82577e77e2a1e5a279f5744f6737da124e062dca"}, 0x80) 22:22:01 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/168, 0xa8}, {0x0}], 0x2, 0x800000, 0x0) sync_file_range(0xffffffffffffffff, 0x2, 0x7ff, 0x2) 22:22:01 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 22:22:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0001110409f50084fbffa05d900000ff020000000000394404ff09df0900000045d49c994e6afadee989"]}) 22:22:01 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @private, 0x0, 0x0, 'rr\x00'}, {@multicast2}}, 0x44) 22:22:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r0, &(0x7f0000000040)=@generic={0x0, "b6611b6b2883526d64d82b38e9010c96b915c9134c9295d167e0438ca7900a726eb5ae1c82abccec699f8454b5d63efa1a7a725a7ba994ccd9f62722709f5f439d0463492d78fb12ea68465e6849b759bf7f5a0e8d8f30fcd58500362669eb2349521e76dae743e985ed82577e77e2a1e5a279f5744f6737da124e062dca"}, 0x80) 22:22:02 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='fd/3\x00') ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)) 22:22:02 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e00e05", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @ipv4={[], [], @multicast1}, [{0x0, 0x0, "e309"}, {0x1, 0x1, "9e9dc2090b48"}]}}}}}}, 0x0) 22:22:02 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)='h', 0x1}) 22:22:02 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @private, 0x0, 0x0, 'rr\x00'}, {@multicast2}}, 0x44) [ 1585.554158][ T1429] netem: change failed [ 1585.568848][ T1434] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1585.577728][ T1434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:22:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300040003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 22:22:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)="cd17"}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x815) open(&(0x7f0000000080)='./file0\x00', 0x2201, 0x0) clone(0x2200, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_io_uring_setup(0x7ad1, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000), 0x0) 22:22:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x1f) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x123, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0) 22:22:04 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)='x', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 22:22:04 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x32c, 0x0, 0x0, 0x148, 0xb4, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'ip6_vti0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c0, 0x1e4, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'vxcan1\x00', {0xfffffffffffffff7, 0xa4, 0x0, 0x0, 0x0, 0xfffffe00, 0x1}}}]}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 22:22:04 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) [ 1586.110409][ T1469] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1586.190579][ T1471] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1586.200257][ T1470] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1586.210578][ T1470] xt_hashlimit: overflow, try lower: 18446744073709551607/164 [ 1586.296527][ T1473] netem: change failed 22:22:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@can_newroute={0x44, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "2d9ccb770cd907dd"}, 0x2}}]}, 0x44}}, 0x0) 22:22:05 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x7b) uselib(&(0x7f00000000c0)='./file0\x00') [ 1586.843309][ T1481] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1586.851629][ T1481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:22:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) 22:22:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3ec, 0x110, 0x110, 0x300, 0x300, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @private1, [], [], 'veth1_to_bridge\x00', 'ip6tnl0\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@hl={{0x24, 'hl\x00'}}, @inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @inet=@TOS={0x24, 'TOS\x00'}}, {{@ipv6={@private1, @loopback, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@dev, @mcast1, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [], [], 'bridge_slave_1\x00', 'veth1_to_bond\x00'}, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00'}}, {{@ipv6={@local, @mcast1, [], [], 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x590) [ 1587.048956][ T1472] debugfs: Directory '1472-4' with parent 'kvm' already present! [ 1587.445430][ T33] audit: type=1804 audit(1607466125.897:75): pid=1496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir386631376/syzkaller.EJxPmn/464/file0" dev="sda1" ino=15983 res=1 errno=0 22:22:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300040003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) [ 1587.703984][ T33] audit: type=1804 audit(1607466125.937:76): pid=1502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir386631376/syzkaller.EJxPmn/464/file0" dev="sda1" ino=15983 res=1 errno=0 22:22:06 executing program 0: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1a6190532b2ceef4, 0xffffffffffffffff, 0x0) 22:22:06 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x7b) uselib(&(0x7f00000000c0)='./file0\x00') 22:22:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:22:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@can_newroute={0x44, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "2d9ccb770cd907dd"}, 0x2}}]}, 0x44}}, 0x0) 22:22:06 executing program 5: setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) [ 1588.309428][ T1544] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1588.318148][ T1544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:22:07 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000001d25fa00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280040018"], 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="8000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 22:22:07 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x7b) uselib(&(0x7f00000000c0)='./file0\x00') 22:22:07 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 22:22:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x100}, 0x10}, 0x78) r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 22:22:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@can_newroute={0x44, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "2d9ccb770cd907dd"}, 0x2}}]}, 0x44}}, 0x0) 22:22:07 executing program 5: setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) [ 1589.274991][ T33] audit: type=1804 audit(1607466127.727:77): pid=1578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir386631376/syzkaller.EJxPmn/466/file0" dev="sda1" ino=15984 res=1 errno=0 [ 1589.334088][ T1579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1589.343918][ T1579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 22:22:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="eb3c906d6b66735066617400028001000240020000f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000180)={[{@uni_xlate='uni_xlate=1'}, {@fat=@flush='flush'}]}) fstat(0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ustat(0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:22:08 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x7b) uselib(&(0x7f00000000c0)='./file0\x00') 22:22:08 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) accept4$inet(r0, &(0x7f0000001b80)={0x2, 0x0, @remote}, 0x0, 0x0) 22:22:08 executing program 5: setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) [ 1590.197732][ T1591] FAT-fs (loop4): Directory bread(block 6) failed [ 1590.205112][ T1591] FAT-fs (loop4): Directory bread(block 7) failed [ 1590.212394][ T1591] FAT-fs (loop4): Directory bread(block 8) failed [ 1590.218985][ T1591] FAT-fs (loop4): Directory bread(block 9) failed [ 1590.225773][ T1591] FAT-fs (loop4): Directory bread(block 10) failed [ 1590.232896][ T1591] FAT-fs (loop4): Directory bread(block 11) failed [ 1590.241760][ T1591] FAT-fs (loop4): Directory bread(block 12) failed [ 1590.248885][ T1591] FAT-fs (loop4): Directory bread(block 13) failed [ 1590.255689][ T1591] FAT-fs (loop4): Directory bread(block 14) failed [ 1590.262488][ T1591] FAT-fs (loop4): Directory bread(block 15) failed 22:22:08 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, r0, 0x2) 22:22:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@can_newroute={0x44, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "2d9ccb770cd907dd"}, 0x2}}]}, 0x44}}, 0x0) [ 1590.410213][ T33] audit: type=1804 audit(1607466128.857:78): pid=1598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir386631376/syzkaller.EJxPmn/467/file0" dev="sda1" ino=15983 res=1 errno=0 22:22:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 22:22:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000186c0)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000980)="b0ff08c66b0d698cb89e2fe088ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22:22:09 executing program 5: setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) 22:22:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x2}]}]}, 0x20}}, 0x0) 22:22:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000f50000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x64c7, 0x16}}}]}, 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000000), 0xb, 0x0) 22:22:09 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x541b, 0x0) 22:22:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f0000000140)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a3d1077407f2177f0000000000000015d530000000feffff63ef872a0a186cf6449fe66884b3bc16076caf9a0600ef665ad9b11f55dd7d020a724a32a8b58e9eb39b46000000f2c4683f9967c5e7be000000000000000000"}, 0x68) 22:22:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1591.972351][ T1624] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:22:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private0}}}}, &(0x7f0000000040)=0xb0) 22:22:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:22:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002009}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008091) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) 22:22:10 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x10) 22:22:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f0000000140)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a3d1077407f2177f0000000000000015d530000000feffff63ef872a0a186cf6449fe66884b3bc16076caf9a0600ef665ad9b11f55dd7d020a724a32a8b58e9eb39b46000000f2c4683f9967c5e7be000000000000000000"}, 0x68) [ 1592.411120][ T1637] dlm: no locking on control device 22:22:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f0000000140)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a3d1077407f2177f0000000000000015d530000000feffff63ef872a0a186cf6449fe66884b3bc16076caf9a0600ef665ad9b11f55dd7d020a724a32a8b58e9eb39b46000000f2c4683f9967c5e7be000000000000000000"}, 0x68) [ 1592.746729][ T1670] dlm: no locking on control device 22:22:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}]}]}, 0x28}}, 0x0) 22:22:11 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001006874620024000200180002004000000000e0414e52611613140000000000000000000000000000000800050000000000"], 0x50}}, 0x0) 22:22:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f0000000140)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a3d1077407f2177f0000000000000015d530000000feffff63ef872a0a186cf6449fe66884b3bc16076caf9a0600ef665ad9b11f55dd7d020a724a32a8b58e9eb39b46000000f2c4683f9967c5e7be000000000000000000"}, 0x68) [ 1593.493992][ T1712] dlm: no locking on control device 22:22:12 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 22:22:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private0}}}}, &(0x7f0000000040)=0xb0) 22:22:12 executing program 5: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) 22:22:12 executing program 0: io_setup(0x7f, &(0x7f0000000000)=0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0]) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000200)) [ 1594.050735][ T1734] dlm: no locking on control device [ 1594.058327][ T1735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:12 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x5c}], [], 0x2f}) lsetxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200), 0x1, 0x2) [ 1594.598129][ T1748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:13 executing program 5: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x99}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x7ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1594.954595][ T1752] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1595.434089][ T1757] kvm [1756]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 1595.472720][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000000d data 0xd3 [ 1595.527659][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001a data 0x1b [ 1595.623136][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000061 data 0x99 [ 1595.655612][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000007d data 0xc3 [ 1595.703995][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000053 data 0xaf [ 1595.738719][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000068 data 0xa3 [ 1595.824402][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000038 data 0xd1 [ 1595.897648][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000047 data 0x71 [ 1595.975910][ T1757] kvm [1756]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000004a data 0x8f [ 1604.973439][ T296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.050695][ T296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.143209][ T296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.237908][ T296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.067969][ T296] IPVS: stopping backup sync thread 11036 ... [ 1607.441501][ T296] device hsr_slave_0 left promiscuous mode [ 1607.450232][ T296] device hsr_slave_1 left promiscuous mode [ 1607.478403][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.486472][ T296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.499704][ T296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.507907][ T296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.522867][ T296] device bridge_slave_1 left promiscuous mode [ 1607.529765][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.548095][ T296] device bridge_slave_0 left promiscuous mode [ 1607.555074][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.585367][ T296] device veth1_macvtap left promiscuous mode [ 1607.591711][ T296] device veth0_macvtap left promiscuous mode [ 1607.598367][ T296] device veth1_vlan left promiscuous mode [ 1607.605187][ T296] device veth0_vlan left promiscuous mode [ 1609.692545][ T296] team0 (unregistering): Port device team_slave_1 removed [ 1609.717787][ T296] team0 (unregistering): Port device team_slave_0 removed [ 1609.738119][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.763408][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.869233][ T296] bond0 (unregistering): Released all slaves 22:22:28 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x738, 0x4540, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:22:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0xe4cf95bb60253587}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/127, 0x7f}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ddffd57e}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r14, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000480)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b38945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff000000000000000000", 0x58}], 0x1) 22:22:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:22:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private0}}}}, &(0x7f0000000040)=0xb0) 22:22:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:22:28 executing program 5: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x99}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x7ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1610.727562][ T1840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 1610.789287][ T1850] kvm_hv_set_msr: 6 callbacks suppressed [ 1610.789353][ T1850] kvm [1835]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 [ 1610.815193][ T1839] kvm [1832]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 1610.929958][ T1839] kvm [1832]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000000d data 0xd3 [ 1611.027825][ T1839] kvm [1832]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001a data 0x1b [ 1611.141740][ T1839] kvm [1832]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000061 data 0x99 [ 1611.206015][ T1839] kvm [1832]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000007d data 0xc3 [ 1611.273253][ T1840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 1611.291469][ T8949] usb 5-1: new low-speed USB device number 2 using dummy_hcd 22:22:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:22:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xc63b9e35) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) [ 1611.346104][ T1839] kvm [1832]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000053 data 0xaf 22:22:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private0}}}}, &(0x7f0000000040)=0xb0) [ 1611.664296][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1611.674611][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1611.684738][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1611.695004][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 22:22:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1611.704968][ T8949] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 22:22:30 executing program 5: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x99}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x7ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:22:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1612.146397][ T8949] usb 5-1: string descriptor 0 read error: -22 [ 1612.154836][ T8949] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice= 0.40 [ 1612.164589][ T8949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.359867][ T1877] kvm [1872]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 1612.413610][ T1875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 1612.436616][ T1877] kvm [1872]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000000d data 0xd3 [ 1612.458671][ T8949] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1612.472854][ T8949] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input14 [ 1612.542773][ T1890] kvm [1871]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 [ 1612.819989][ T8949] usb 5-1: USB disconnect, device number 2 [ 1613.552227][ T8949] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 1613.914083][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1613.924625][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1613.936653][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1613.946845][ T8949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1613.956836][ T8949] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 22:22:32 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x738, 0x4540, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:22:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:22:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:22:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xc63b9e35) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 22:22:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:22:32 executing program 5: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x99}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x7ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1614.283411][ T8949] usb 5-1: string descriptor 0 read error: -71 [ 1614.289880][ T8949] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice= 0.40 [ 1614.301739][ T8949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.427010][ T8949] usb 5-1: can't set config #1, error -71 [ 1614.446909][ T8949] usb 5-1: USB disconnect, device number 3 [ 1614.675919][ T1933] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 22:22:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1615.142575][ T1783] usb 5-1: new low-speed USB device number 4 using dummy_hcd 22:22:33 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x35) setresuid(0xffffffffffffffff, 0xee00, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 22:22:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:22:33 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x0, 0x80}) [ 1615.538681][ T1783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1615.548832][ T1783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1615.558935][ T1783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1615.569283][ T1783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1615.579211][ T1783] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 22:22:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xc63b9e35) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) [ 1615.611332][ T1952] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 22:22:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) [ 1616.032828][ T1783] usb 5-1: string descriptor 0 read error: -22 [ 1616.041485][ T1783] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice= 0.40 [ 1616.050961][ T1783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.096656][ T1965] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 1616.136849][ T1962] kvm_hv_set_msr: 32 callbacks suppressed [ 1616.136910][ T1962] kvm [1958]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 [ 1616.256062][ T1783] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1616.269424][ T1783] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15 [ 1616.559256][ T1783] usb 5-1: USB disconnect, device number 4 22:22:35 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x738, 0x4540, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:22:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x7}) 22:22:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0xbf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:22:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "73e8a011"}}) 22:22:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xc63b9e35) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) [ 1617.560186][ T1995] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 1617.626809][ T2003] kvm [1993]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 22:22:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x1ff]}, @NL80211_ATTR_FRAME={0x6f, 0x33, @beacon={@with_ht={{{}, {}, @broadcast, @broadcast, @random="ff6aa342675e"}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x94}}, 0x0) 22:22:36 executing program 1: setregid(0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x2, 0x9}, {0xcb, 0x1}]}, 0x18, 0x1) r0 = perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x2}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setresgid(0x0, 0x0, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xffffffffffffff5d) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000240)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xd8d, 0x0, 0x0, 0x0, 0x1}) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) get_robust_list(0x0, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000140)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)}}, &(0x7f0000000300)=0x18) [ 1618.144180][ T1782] usb 5-1: new low-speed USB device number 5 using dummy_hcd 22:22:36 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001380)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x9, 0x3, 0x0, [{@multicast2}, {@private}]}, @timestamp={0x44, 0x4}]}}, @info_reply}}}}, 0x0) [ 1618.513830][ T1782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1618.524147][ T1782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1618.534202][ T1782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1618.544531][ T1782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1618.554448][ T1782] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 22:22:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg2\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6de97140, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) clock_getres(0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005280)=[{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)="454699645ef724744c91db", 0xb}, {&(0x7f00000000c0)='-', 0x1}], 0x2}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:22:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x1ff]}, @NL80211_ATTR_FRAME={0x6f, 0x33, @beacon={@with_ht={{{}, {}, @broadcast, @broadcast, @random="ff6aa342675e"}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x94}}, 0x0) [ 1619.044687][ T1782] usb 5-1: string descriptor 0 read error: -22 [ 1619.051136][ T1782] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice= 0.40 [ 1619.060700][ T1782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.248444][ T1782] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1619.262115][ T1782] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input16 22:22:37 executing program 3: unshare(0x8000400) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0xc, 0x0) [ 1619.543714][ T1782] usb 5-1: USB disconnect, device number 5 22:22:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) 22:22:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x1ff]}, @NL80211_ATTR_FRAME={0x6f, 0x33, @beacon={@with_ht={{{}, {}, @broadcast, @broadcast, @random="ff6aa342675e"}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x94}}, 0x0) 22:22:44 executing program 3: unshare(0x8000400) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0xc, 0x0) 22:22:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg2\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6de97140, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) clock_getres(0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005280)=[{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)="454699645ef724744c91db", 0xb}, {&(0x7f00000000c0)='-', 0x1}], 0x2}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:22:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 22:22:44 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x738, 0x4540, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1626.432695][ T1784] usb 5-1: new low-speed USB device number 6 using dummy_hcd 22:22:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x1ff]}, @NL80211_ATTR_FRAME={0x6f, 0x33, @beacon={@with_ht={{{}, {}, @broadcast, @broadcast, @random="ff6aa342675e"}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x94}}, 0x0) 22:22:45 executing program 3: unshare(0x8000400) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0xc, 0x0) 22:22:45 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x2, {0x10, 0x0, 0x0, @mcast1}}, 0x24) 22:22:45 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0x40046109, 0x0) [ 1626.813720][ T1784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1626.824021][ T1784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1626.834084][ T1784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1626.844142][ T1784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1626.854054][ T1784] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 22:22:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) [ 1627.383611][ T1784] usb 5-1: string descriptor 0 read error: -22 [ 1627.390053][ T1784] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice= 0.40 [ 1627.399410][ T1784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 22:22:45 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)={{0x12, 0x1, 0x0, 0x28, 0xa1, 0x4, 0x40, 0x582, 0x6d, 0xce92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0x0, 0x8d, 0x70, 0x84}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x39, 0xf5, 0x56}}]}}]}}, 0x0) 22:22:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg2\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6de97140, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) clock_getres(0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005280)=[{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)="454699645ef724744c91db", 0xb}, {&(0x7f00000000c0)='-', 0x1}], 0x2}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:22:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x98f906}) [ 1627.606138][ T1784] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1627.622640][ T1784] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input17 22:22:46 executing program 3: unshare(0x8000400) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0xc, 0x0) [ 1627.922863][ T1782] usb 5-1: USB disconnect, device number 6 22:22:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040), 0x4) [ 1628.282281][ T1784] usb 2-1: new high-speed USB device number 2 using dummy_hcd 22:22:46 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@ipv4_newrule={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8915, &(0x7f00000001c0)={'bridge_slave_0\x00', {0x2, 0x0, @multicast2}}) [ 1628.675604][ T1784] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1628.684881][ T1784] usb 2-1: config 0 interface 0 has no altsetting 1 22:22:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x98f906}) [ 1628.882776][ T1784] usb 2-1: New USB device found, idVendor=0582, idProduct=006d, bcdDevice=ce.92 [ 1628.892169][ T1784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.900279][ T1784] usb 2-1: Product: syz [ 1628.904751][ T1784] usb 2-1: Manufacturer: syz [ 1628.909974][ T1784] usb 2-1: SerialNumber: syz 22:22:47 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@echo=0xffffffff) 22:22:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000008004500002c000095"], 0x0) [ 1629.147487][ T1784] usb 2-1: config 0 descriptor?? 22:22:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0xc5, &(0x7f0000000000)=""/197, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1629.234914][ T1784] snd-usb-audio: probe of 2-1:0.0 failed with error -2 22:22:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg2\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6de97140, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) clock_getres(0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005280)=[{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)="454699645ef724744c91db", 0xb}, {&(0x7f00000000c0)='-', 0x1}], 0x2}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1629.397918][ T1784] usb 2-1: USB disconnect, device number 2 22:22:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x98f906}) [ 1630.195473][ T1782] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1630.573502][ T1782] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1630.584519][ T1782] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1630.773395][ T1782] usb 2-1: New USB device found, idVendor=0582, idProduct=006d, bcdDevice=ce.92 [ 1630.782790][ T1782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.792890][ T1782] usb 2-1: Product: syz [ 1630.797159][ T1782] usb 2-1: Manufacturer: syz [ 1630.802566][ T1782] usb 2-1: SerialNumber: syz [ 1630.854779][ T1782] usb 2-1: config 0 descriptor?? 22:22:49 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x302, &(0x7f0000000080)={&(0x7f0000000740)={0x8e8, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x8cc}]}, 0x8e8}}, 0x0) 22:22:49 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="5b643a3a2e679285f4f80bd58537148c6d5d3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 22:22:49 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$netlink(0x10, 0x3, 0x0) openat$userio(0xffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 22:22:49 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xc1\xf9\xe7\x7f\xf3\xbdi\x80\xc7\x10\xb8T\xf1\xb8\xab\xd1\xec@\x92\xc2\xe8\x82\x8e)\x92\x84\xf6\x10^h\x9a*\x0f]\x9d\xa7Z\xf8\xc1\x9cW\n\xa5\xbd\'f\x13\xc8\x8d\xc8\x9d|\x86\x99+\xfa\xef\x7f\xe9\xb2pP\xb88\xec\x84\x18\xa3\xa5^*\xc5.\x1b\t\xd4\x00&YY*\xa0\ri\xc5j\x86Jd\xd1dq,\x80\xef\x9eaz\xde\x8f\xad\xf8\xd9\x8a\x03\x87\x1dS\x88\xa8z;\xd2\xf9\x84\xd9\xc8M\t\xde\xf5m\x11z\xe9\x9a\x14\x17\x93\xb1\x97\xa0\x8fX\xf4\xcft\x9dQ\x8cf\xff\xa1\x9dFQ.\xe3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 22:22:49 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x98f906}) 22:22:49 executing program 2: set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1630.982195][ T1782] usb 2-1: can't set config #0, error -71 [ 1631.045136][ T1782] usb 2-1: USB disconnect, device number 3 [ 1631.185887][ T2214] libceph: resolve 'd' (ret=-3): failed [ 1631.191554][ T2214] libceph: Failed to parse monitor IPs: -3 [ 1631.251303][ T2215] device vlan2 entered promiscuous mode [ 1631.257100][ T2215] device ip6gretap0 entered promiscuous mode [ 1631.387335][ T2215] device ip6gretap0 left promiscuous mode 22:22:49 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xc1\xf9\xe7\x7f\xf3\xbdi\x80\xc7\x10\xb8T\xf1\xb8\xab\xd1\xec@\x92\xc2\xe8\x82\x8e)\x92\x84\xf6\x10^h\x9a*\x0f]\x9d\xa7Z\xf8\xc1\x9cW\n\xa5\xbd\'f\x13\xc8\x8d\xc8\x9d|\x86\x99+\xfa\xef\x7f\xe9\xb2pP\xb88\xec\x84\x18\xa3\xa5^*\xc5.\x1b\t\xd4\x00&YY*\xa0\ri\xc5j\x86Jd\xd1dq,\x80\xef\x9eaz\xde\x8f\xad\xf8\xd9\x8a\x03\x87\x1dS\x88\xa8z;\xd2\xf9\x84\xd9\xc8M\t\xde\xf5m\x11z\xe9\x9a\x14\x17\x93\xb1\x97\xa0\x8fX\xf4\xcft\x9dQ\x8cf\xff\xa1\x9dFQ.\xe3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 22:22:50 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=unix,'}) 22:22:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x401}, 0x14}}, 0x0) 22:22:50 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1632.025900][ T2215] device vlan2 entered promiscuous mode [ 1632.031560][ T2215] device ip6gretap0 entered promiscuous mode [ 1632.138262][ T2236] 9pnet: p9_fd_create_unix (2236): problem connecting socket: éq‰Y’3aK: -13 [ 1632.177045][ T2241] 9pnet: p9_fd_create_unix (2241): problem connecting socket: éq‰Y’3aK: -111 22:22:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7d, &(0x7f000000a000)=[@in={0x2, 0x0, @broadcast}], 0x10) [ 1632.213068][ T2215] device ip6gretap0 left promiscuous mode 22:22:50 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) io_setup(0x6, &(0x7f0000000140)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:22:50 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xc1\xf9\xe7\x7f\xf3\xbdi\x80\xc7\x10\xb8T\xf1\xb8\xab\xd1\xec@\x92\xc2\xe8\x82\x8e)\x92\x84\xf6\x10^h\x9a*\x0f]\x9d\xa7Z\xf8\xc1\x9cW\n\xa5\xbd\'f\x13\xc8\x8d\xc8\x9d|\x86\x99+\xfa\xef\x7f\xe9\xb2pP\xb88\xec\x84\x18\xa3\xa5^*\xc5.\x1b\t\xd4\x00&YY*\xa0\ri\xc5j\x86Jd\xd1dq,\x80\xef\x9eaz\xde\x8f\xad\xf8\xd9\x8a\x03\x87\x1dS\x88\xa8z;\xd2\xf9\x84\xd9\xc8M\t\xde\xf5m\x11z\xe9\x9a\x14\x17\x93\xb1\x97\xa0\x8fX\xf4\xcft\x9dQ\x8cf\xff\xa1\x9dFQ.\xe3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 22:22:51 executing program 5: r0 = memfd_create(&(0x7f0000000080)='vboxnet0m\x16\xe2R\xcc[\x85\x02d \xa0d5sum\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x95, 0x0, &(0x7f0000000000)) 22:22:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x7}]}]}}, 0x0, 0x32}, 0x20) 22:22:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@delchain={0x24, 0x29, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 22:22:51 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$netlink(0x10, 0x3, 0x0) openat$userio(0xffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 22:22:51 executing program 1: read(0xffffffffffffffff, &(0x7f00000004c0)=""/194, 0xc2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x5, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}, {{0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x108) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40220004}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xffff, 0x0, @local, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1f}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8}]}, 0x70}}, 0x0) 22:22:51 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006a00fb056c464200a9002600000000005551f2ca080005003e3368d2558dc6724de52b212b47dce9d2c12f9ba003f5491fc24b11d2afffe2ca0a31f1a19083efb61a0950aa2ef9b22367f666ab7cc71358b1ced47cc0593613661c710303268e2414a36bb62ca469b4763992fbff6201eb8fe538c84f214a04c3dd72459bb6ffd60406a493ec5255f4a6349bf6bbe78386b3d64a2848361807055ceb4fc52ef3cbc2af0577d15bb6af2587fbb744ef5b1fc40efa9c290bc0f0b8aee448549f977116d49efa6929a38ecc92f9cfa64a57281eeac91a16d7a7fbd1491f63d737f462ce59c76303186dc87918a776c6ebadd6f558f415f35a1a6a026bbea109a2cd40230a9e7603c2d0ab44db4d832397efad090f50ce6e4bfed1e97e5c5a6266472c78bb21ee1b60ce38c74535627c9a93da10d8851d2cf4404ab34c55a913bbda75b0a70732f7beb69d03b16fed1e4a99bbb1e042151ea2c4c1c60357cbff00"/367, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 22:22:51 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xc1\xf9\xe7\x7f\xf3\xbdi\x80\xc7\x10\xb8T\xf1\xb8\xab\xd1\xec@\x92\xc2\xe8\x82\x8e)\x92\x84\xf6\x10^h\x9a*\x0f]\x9d\xa7Z\xf8\xc1\x9cW\n\xa5\xbd\'f\x13\xc8\x8d\xc8\x9d|\x86\x99+\xfa\xef\x7f\xe9\xb2pP\xb88\xec\x84\x18\xa3\xa5^*\xc5.\x1b\t\xd4\x00&YY*\xa0\ri\xc5j\x86Jd\xd1dq,\x80\xef\x9eaz\xde\x8f\xad\xf8\xd9\x8a\x03\x87\x1dS\x88\xa8z;\xd2\xf9\x84\xd9\xc8M\t\xde\xf5m\x11z\xe9\x9a\x14\x17\x93\xb1\x97\xa0\x8fX\xf4\xcft\x9dQ\x8cf\xff\xa1\x9dFQ.\xe3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) [ 1633.338131][ T2267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1633.524610][ T2278] device vlan2 entered promiscuous mode [ 1633.530276][ T2278] device ip6gretap0 entered promiscuous mode 22:22:52 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006800b595000006000000f60000000000", @ANYRES32=0x0, @ANYBLOB="140002003c15d05843c8"], 0x3}}, 0x0) close(r2) socket$inet(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) [ 1633.590756][ T2278] device ip6gretap0 left promiscuous mode 22:22:52 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x80000001) [ 1634.096396][ T2274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1634.132072][ T2283] IPv6: sit1: Disabled Multicast RS 22:22:52 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) 22:22:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:22:53 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$netlink(0x10, 0x3, 0x0) openat$userio(0xffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 22:22:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f00000000c0)=0x20000048) 22:22:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x481, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008bc0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0xffffffffffffffda, r2}, 0x28) [ 1634.856053][ T2305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1634.935897][ T2311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x9, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x6, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000fcdb"], 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1635.089850][ T2312] device vlan2 entered promiscuous mode [ 1635.095625][ T2312] device ip6gretap0 entered promiscuous mode [ 1635.109193][ T1784] usb 6-1: new high-speed USB device number 28 using dummy_hcd 22:22:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x26) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e, 0x0, &(0x7f0000000300)="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"}, 0x48) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1635.338799][ T2312] device ip6gretap0 left promiscuous mode [ 1635.493680][ T1784] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1635.504888][ T1784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.602185][ T1784] usb 6-1: config 0 descriptor?? [ 1635.651250][ T1784] gspca_main: sonixj-2.14.0 probing 0c45:613e 22:22:54 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)='{\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 22:22:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="ff03000000000000240012800b000100627269646765000014000280080001000004000008000500000001"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) [ 1636.811991][ T1784] gspca_sonixj: reg_w1 err -71 [ 1636.857559][ T2357] device vlan2 entered promiscuous mode [ 1636.863424][ T2357] device ip6gretap0 entered promiscuous mode [ 1636.883029][ T1784] sonixj: probe of 6-1:0.0 failed with error -71 22:22:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x9, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x6, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000fcdb"], 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1636.948754][ T1784] usb 6-1: USB disconnect, device number 28 [ 1636.974734][ T2357] device ip6gretap0 left promiscuous mode [ 1637.424641][ T2372] device bridge3 entered promiscuous mode [ 1637.592492][T16619] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1637.954655][T16619] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1637.964101][T16619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.079236][T16619] usb 6-1: config 0 descriptor?? [ 1638.146752][T16619] gspca_main: sonixj-2.14.0 probing 0c45:613e 22:22:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c866b94d0900000f320f0133f30f01e80f69e8650f01c883dd000f0131ba400c3ef20f2c2b66efbafc0ced", 0x33}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:22:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, r2, 0x0) preadv2(r0, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/128, 0x80}], 0x1, 0x0, 0x1, 0x0) 22:22:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) 22:22:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) 22:22:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x9, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x6, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000fcdb"], 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1638.512436][T16619] gspca_sonixj: reg_w1 err -71 [ 1638.517509][T16619] sonixj: probe of 6-1:0.0 failed with error -71 [ 1638.573086][T16619] usb 6-1: USB disconnect, device number 29 22:22:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x26) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e, 0x0, &(0x7f0000000300)="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"}, 0x48) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:22:57 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x401, 0x0) write$snddsp(r0, &(0x7f00000001c0)="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", 0x1000) [ 1640.052756][ T1784] usb 6-1: new high-speed USB device number 30 using dummy_hcd 22:22:58 executing program 3: open$dir(&(0x7f0000001240)='./file0\x00', 0x40000000ac5, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = getpid() fcntl$lock(r0, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = getpgid(0x0) fcntl$lock(r2, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000000a, r3}) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100040000004e}) 22:22:58 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 1640.447791][ T1784] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1640.457099][ T1784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.538423][ T1784] usb 6-1: config 0 descriptor?? [ 1640.573082][ T33] audit: type=1804 audit(1607466179.027:79): pid=2433 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815800513/syzkaller.p9BHAe/441/file0" dev="sda1" ino=16257 res=1 errno=0 [ 1640.641574][ T1784] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1640.728773][ T33] audit: type=1804 audit(1607466179.057:80): pid=2430 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815800513/syzkaller.p9BHAe/441/file0" dev="sda1" ino=16257 res=1 errno=0 [ 1640.753926][ T33] audit: type=1804 audit(1607466179.057:81): pid=2430 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir815800513/syzkaller.p9BHAe/441/file0" dev="sda1" ino=16257 res=1 errno=0 22:22:59 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001740)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@gid={'gid', 0x3d, 0xee00}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) 22:22:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000380)=['.\\%}\x00', '\\]\x00'], 0x8}) 22:22:59 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="0fe3") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x10000000], 0x100000}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x9, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x6, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000fcdb"], 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:22:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80) 22:22:59 executing program 1: socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 22:22:59 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001740)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@gid={'gid', 0x3d, 0xee00}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) [ 1641.693291][ T1784] gspca_sonixj: reg_w1 err -71 [ 1641.753601][ T1784] sonixj: probe of 6-1:0.0 failed with error -71 [ 1641.860657][ T1784] usb 6-1: USB disconnect, device number 30 22:23:00 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000046b3d5ae6eea76f47e2decefec86d8641fffffd4af82a3e67789b53bdddc07305b0efb2e72467c464efc78da31dbf626e2564633303899efd50478db832987c9e76885107f4f1c6c9f749a5597aafa6a582fdf4ff452a61f8db3a5d76601bdc676bdb4327f594df0736f83c3c43cb849658b21b8fc7bcdc2ac64a1b90767ced8b06853cb31448e633d516e6b5f1b641f538d88d653caafaa56b312ff78e84ab3cecc464628bfd79c482860a6055f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="1800000000000000000000000000000061120000000000009500000000000000b217ee261009ef9e0ccf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r3, 0x2}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f00000003c0)={r2}, 0x8) 22:23:00 executing program 1: socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 22:23:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x26) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e, 0x0, &(0x7f0000000300)="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"}, 0x48) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:23:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) 22:23:01 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001740)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@gid={'gid', 0x3d, 0xee00}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) 22:23:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008884, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x50, &(0x7f0000001280)=""/4092, &(0x7f0000000040)=0xffc) 22:23:01 executing program 1: socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 22:23:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x1, 0xb4060000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xa, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) [ 1643.399012][ T2495] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 22:23:02 executing program 1: socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1643.646012][ T1784] usb 6-1: new high-speed USB device number 31 using dummy_hcd 22:23:02 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001740)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@gid={'gid', 0x3d, 0xee00}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) 22:23:02 executing program 4: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newqdisc={0x148, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x571, 0x0, 0x3b5}}]}}]}, 0x148}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd1186dd", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 22:23:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008884, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x50, &(0x7f0000001280)=""/4092, &(0x7f0000000040)=0xffc) [ 1644.053647][ T1784] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1644.063038][ T1784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.137395][ T1784] usb 6-1: config 0 descriptor?? [ 1644.208444][ T1784] gspca_main: sonixj-2.14.0 probing 0c45:613e 22:23:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) [ 1644.571756][ T2527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1644.649632][ T2529] Dropped outbound packet type=0 22:23:03 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008884, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x50, &(0x7f0000001280)=""/4092, &(0x7f0000000040)=0xffc) [ 1644.715434][ T2531] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1645.272678][ T1784] gspca_sonixj: reg_w1 err -71 [ 1645.342790][ T1784] sonixj: probe of 6-1:0.0 failed with error -71 [ 1645.375743][ T1784] usb 6-1: USB disconnect, device number 31 22:23:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x26) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e, 0x0, &(0x7f0000000300)="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"}, 0x48) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:23:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x40}}, 0x0) 22:23:05 executing program 4: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newqdisc={0x148, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x571, 0x0, 0x3b5}}]}}]}, 0x148}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd1186dd", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 22:23:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0) rt_sigpending(&(0x7f00000006c0), 0x8) socket(0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) syz_extract_tcp_res(0x0, 0xff, 0xfff) 22:23:05 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008884, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x50, &(0x7f0000001280)=""/4092, &(0x7f0000000040)=0xffc) 22:23:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) 22:23:05 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) shmdt(r1) [ 1646.847762][ T2566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1646.900782][ T2566] ===================================================== [ 1646.906565][ T2566] BUG: KMSAN: uninit-value in iptable_mangle_hook+0x8a0/0x8e0 [ 1646.913453][ T2566] CPU: 1 PID: 2566 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1646.913453][ T2566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.913453][ T2566] Call Trace: [ 1646.913453][ T2566] dump_stack+0x21c/0x280 [ 1646.913453][ T2566] kmsan_report+0xf7/0x1e0 [ 1646.913453][ T2566] __msan_warning+0x5f/0xa0 [ 1646.913453][ T2566] iptable_mangle_hook+0x8a0/0x8e0 [ 1646.913453][ T2566] ? iptable_mangle_net_exit+0x100/0x100 [ 1646.913453][ T2566] nf_hook_slow+0x17b/0x460 [ 1646.913453][ T2566] __ip_local_out+0x7a6/0x860 [ 1646.913453][ T2566] ? __ip_local_out+0x860/0x860 [ 1646.972238][ T2566] ip_local_out+0xa1/0x1e0 [ 1646.972238][ T2566] iptunnel_xmit+0x932/0xf20 [ 1646.972238][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1646.972238][ T2566] udp_tunnel_xmit_skb+0x52a/0x650 [ 1646.972238][ T2566] geneve_xmit+0x3908/0x3cc0 [ 1646.972238][ T2566] ? geneve_stop+0x400/0x400 [ 1646.972238][ T2566] xmit_one+0x2b9/0x770 [ 1646.972238][ T2566] dev_hard_start_xmit+0x195/0x430 [ 1646.972238][ T2566] sch_direct_xmit+0x5c7/0x1a30 [ 1646.972238][ T2566] __qdisc_run+0x361/0x4a0 [ 1646.972238][ T2566] __dev_queue_xmit+0x1de2/0x4520 [ 1646.972238][ T2566] dev_queue_xmit+0x4b/0x60 [ 1647.031240][ T2566] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 1647.031240][ T2566] packet_sendmsg+0x86f9/0x99d0 [ 1647.031240][ T2566] ? propagate_entity_load_avg+0x4c/0x1320 [ 1647.031240][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1647.031240][ T2566] ? kmsan_internal_set_origin+0x85/0xc0 [ 1647.031240][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1647.031240][ T2566] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1647.031240][ T2566] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1647.031240][ T2566] ? aa_sk_perm+0x9a8/0xed0 [ 1647.031240][ T2566] ? packet_getsockopt+0x1120/0x1120 [ 1647.031240][ T2566] __sys_sendto+0x9dc/0xc80 [ 1647.031240][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1647.031240][ T2566] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1647.031240][ T2566] __se_sys_sendto+0x107/0x130 [ 1647.031240][ T2566] __ia32_sys_sendto+0x6e/0x90 [ 1647.031240][ T2566] __do_fast_syscall_32+0x102/0x160 [ 1647.031240][ T2566] do_fast_syscall_32+0x6a/0xc0 [ 1647.031240][ T2566] do_SYSENTER_32+0x73/0x90 [ 1647.031240][ T2566] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1647.129978][ T2566] RIP: 0023:0xf7f50549 [ 1647.129978][ T2566] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1647.129978][ T2566] RSP: 002b:00000000f554a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1647.129978][ T2566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1647.129978][ T2566] RDX: 000000000000000e RSI: 0000000000000000 RDI: 00000000200002c0 [ 1647.129978][ T2566] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1647.182060][ T2566] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1647.182060][ T2566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1647.182060][ T2566] [ 1647.182060][ T2566] Uninit was stored to memory at: [ 1647.182060][ T2566] kmsan_internal_chain_origin+0xad/0x130 [ 1647.182060][ T2566] __msan_chain_origin+0x57/0xa0 [ 1647.182060][ T2566] iptunnel_xmit+0xbd9/0xf20 [ 1647.182060][ T2566] udp_tunnel_xmit_skb+0x52a/0x650 [ 1647.182060][ T2566] geneve_xmit+0x3908/0x3cc0 [ 1647.182060][ T2566] xmit_one+0x2b9/0x770 [ 1647.182060][ T2566] dev_hard_start_xmit+0x195/0x430 [ 1647.182060][ T2566] sch_direct_xmit+0x5c7/0x1a30 [ 1647.182060][ T2566] __qdisc_run+0x361/0x4a0 [ 1647.182060][ T2566] __dev_queue_xmit+0x1de2/0x4520 [ 1647.182060][ T2566] dev_queue_xmit+0x4b/0x60 [ 1647.182060][ T2566] packet_sendmsg+0x86f9/0x99d0 [ 1647.182060][ T2566] __sys_sendto+0x9dc/0xc80 [ 1647.182060][ T2566] __se_sys_sendto+0x107/0x130 [ 1647.182060][ T2566] __ia32_sys_sendto+0x6e/0x90 [ 1647.182060][ T2566] __do_fast_syscall_32+0x102/0x160 [ 1647.182060][ T2566] do_fast_syscall_32+0x6a/0xc0 [ 1647.182060][ T2566] do_SYSENTER_32+0x73/0x90 [ 1647.182060][ T2566] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1647.182060][ T2566] [ 1647.182060][ T2566] Uninit was created at: [ 1647.182060][ T2566] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1647.182060][ T2566] kmsan_slab_alloc+0x8d/0xe0 [ 1647.182060][ T2566] __kmalloc_node_track_caller+0xc61/0x15f0 [ 1647.182060][ T2566] __alloc_skb+0x309/0xae0 [ 1647.182060][ T2566] alloc_skb_with_frags+0x1f3/0xc20 [ 1647.182060][ T2566] sock_alloc_send_pskb+0xc73/0xe40 [ 1647.182060][ T2566] packet_sendmsg+0x6aa3/0x99d0 [ 1647.182060][ T2566] __sys_sendto+0x9dc/0xc80 [ 1647.182060][ T2566] __se_sys_sendto+0x107/0x130 [ 1647.182060][ T2566] __ia32_sys_sendto+0x6e/0x90 [ 1647.182060][ T2566] __do_fast_syscall_32+0x102/0x160 [ 1647.182060][ T2566] do_fast_syscall_32+0x6a/0xc0 [ 1647.182060][ T2566] do_SYSENTER_32+0x73/0x90 [ 1647.182060][ T2566] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1647.182060][ T2566] ===================================================== [ 1647.182060][ T2566] Disabling lock debugging due to kernel taint [ 1647.182060][ T2566] Kernel panic - not syncing: panic_on_warn set ... [ 1647.182060][ T2566] CPU: 1 PID: 2566 Comm: syz-executor.4 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 1647.182060][ T2566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.182060][ T2566] Call Trace: [ 1647.182060][ T2566] dump_stack+0x21c/0x280 [ 1647.182060][ T2566] panic+0x4c8/0xea7 [ 1647.182060][ T2566] ? add_taint+0x17c/0x210 [ 1647.182060][ T2566] kmsan_report+0x1da/0x1e0 [ 1647.182060][ T2566] __msan_warning+0x5f/0xa0 [ 1647.182060][ T2566] iptable_mangle_hook+0x8a0/0x8e0 [ 1647.182060][ T2566] ? iptable_mangle_net_exit+0x100/0x100 [ 1647.182060][ T2566] nf_hook_slow+0x17b/0x460 [ 1647.182060][ T2566] __ip_local_out+0x7a6/0x860 [ 1647.182060][ T2566] ? __ip_local_out+0x860/0x860 [ 1647.182060][ T2566] ip_local_out+0xa1/0x1e0 [ 1647.182060][ T2566] iptunnel_xmit+0x932/0xf20 [ 1647.182060][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1647.182060][ T2566] udp_tunnel_xmit_skb+0x52a/0x650 [ 1647.182060][ T2566] geneve_xmit+0x3908/0x3cc0 [ 1647.182060][ T2566] ? geneve_stop+0x400/0x400 [ 1647.182060][ T2566] xmit_one+0x2b9/0x770 [ 1647.182060][ T2566] dev_hard_start_xmit+0x195/0x430 [ 1647.182060][ T2566] sch_direct_xmit+0x5c7/0x1a30 [ 1647.182060][ T2566] __qdisc_run+0x361/0x4a0 [ 1647.182060][ T2566] __dev_queue_xmit+0x1de2/0x4520 [ 1647.182060][ T2566] dev_queue_xmit+0x4b/0x60 [ 1647.182060][ T2566] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 1647.182060][ T2566] packet_sendmsg+0x86f9/0x99d0 [ 1647.182060][ T2566] ? propagate_entity_load_avg+0x4c/0x1320 [ 1647.182060][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1647.182060][ T2566] ? kmsan_internal_set_origin+0x85/0xc0 [ 1647.182060][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1647.182060][ T2566] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1647.182060][ T2566] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1647.182060][ T2566] ? aa_sk_perm+0x9a8/0xed0 [ 1647.182060][ T2566] ? packet_getsockopt+0x1120/0x1120 [ 1647.182060][ T2566] __sys_sendto+0x9dc/0xc80 [ 1647.182060][ T2566] ? kmsan_get_metadata+0x116/0x180 [ 1647.182060][ T2566] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1647.182060][ T2566] __se_sys_sendto+0x107/0x130 [ 1647.182060][ T2566] __ia32_sys_sendto+0x6e/0x90 [ 1647.182060][ T2566] __do_fast_syscall_32+0x102/0x160 [ 1647.182060][ T2566] do_fast_syscall_32+0x6a/0xc0 [ 1647.182060][ T2566] do_SYSENTER_32+0x73/0x90 [ 1647.182060][ T2566] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1647.627688][ T2566] RIP: 0023:0xf7f50549 [ 1647.627688][ T2566] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1647.627688][ T2566] RSP: 002b:00000000f554a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1647.627688][ T2566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1647.627688][ T2566] RDX: 000000000000000e RSI: 0000000000000000 RDI: 00000000200002c0 [ 1647.627688][ T2566] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1647.627688][ T2566] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1647.627688][ T2566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1647.627688][ T2566] Kernel Offset: disabled [ 1647.627688][ T2566] Rebooting in 86400 seconds..