{0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, 0x0) 06:56:14 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 06:56:14 executing program 4: r0 = epoll_create(0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup3(r0, r1, 0x0) epoll_pwait(r1, &(0x7f00000006c0)=[{}], 0x1, 0x0, 0x0, 0x0) 06:56:14 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 06:56:15 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 06:56:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) 06:56:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 06:56:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) tkill(r2, 0x1000000000016) 06:56:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 06:56:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, 0xffffff7f}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0) 06:56:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x5f) dup3(r0, r1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0xf, 0x0, &(0x7f0000000080)) 06:56:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TCSETX(r0, 0x5433, 0x0) 06:56:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 06:56:20 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:56:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 06:56:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:56:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$cgroup_int(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) tkill(r2, 0x1000000000016) 06:56:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket(0x1, 0x5, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 06:56:21 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:56:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b40, 0x0) 06:56:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) 06:56:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14}, 0x14) sendto$inet(r1, &(0x7f00000002c0)="e695d7fd4428d67b8690c2809788d0d23de6ca8507f6dbda1a026d4cf74251dd5957592035f1d9310d12561f8368b816326835c4f4fc291e27a69cf4118ff3fdcc8d00d402c20870dec639ef07b451581c84f08d35ac0bcd7b6e851c68b0be42e8035c03309c445bb36d15d5a9f1162356c290e5633de0516003163aa2ab2c8106218b30d5a82afc81a83162a2356102205743ccdaee72e43c723f4aa07f66e45b4e834eb97fd8bcdb10edaa2dbb4e51f6b5ce32f8f1ef51476ffddc43b26cb723f9c62c45fea8e99b554a7c97edeedf1a0ef50079d6e6f18536931b9182b0b6248bc24b2491701015e71ec414e2ddc0bc226344e06cc0d386e9706661fc22574b4f295f07337bd2af8df4450c7325298de6bbbb660f6847d12a4070a5fc472a499bf82da42302bfcbc37ad4be47d21e1bd0ee7758f0cb859ba3c16c138fbe3d978bcc253ec3a0e14d45378c12d260cfdb955d6d7122ec4b03ea53c9bd5aed7ed32cbcea8063706aa391daf5e7a5a1e095309b9e65c8418f4ebfbda48d137baf185c75579457ca2bec93725813c88135d9d35708ed4aeea4d563fd2eb910b2b35a91182ff9a807a83642471822593e14eb1b36b1b3402d3d7f94749270155431e9fe7481aea2013b6816ae1ad4b95c7a7eea6e57c68d9ca3e83c5c5f1e8e2f79135f1c61479cefb3b9687ee3ed58a8e3dfecc29a977b152139aeb2804486f6c6273e467e7b824bfac50fc38025ce36713821f9231963ee5ffcf077b8dbe200cfc3bf9c23a4cdb51644f315c1be4f961ccff54e9bfc7804fee9c6cc042380bfd4959394cc1cce0590705c23d9e40fa1b3c7d67672a852da203174d965da5a7fda8407a4fff9d14be977607e6cf5f854f19923e70df4f6bfe8768028f0cbb6e333ff17d173a7bfc91bbf2715b199feb0bc92c4ccd12496ee1ef066ded3dbf5f3ffb968ace935b4ea363d544210c286a776a7c4aa5d1fb410435ddac4ef28ff86ebfe230022cbbf8ff3613f7f5050c5013b629c091b4400f18a1e4c1a9eff95809150d0572bf64fb9802c25f9b249e0aceb0431623a7b197037f1322758df3c93d7ed7cf5703e706bd4936ac3eb06329286596bfe4d3e21c24c8ab4466c0ea6cac11addb8bf16f98abf3b4dd70fa7446e06bba89240732c6d881ae5078be1e600407cf7f9d77438dda28c7ae1c385d50667ec03f1357da5232489d572eeebbc91a063ebcb1930536c90f15bb5490bd6a2aa241f00d1a41dd40ab53b9b532b3ccb720c69115e66e5c144841a4295035b7421ca8ae4f6b16b60ab68045fa1c46c5e809828e624966a992454d9cf2f38f76728880c4ec4713055e8ebd86049c3e7f59f921c98687c3b7b35045b9957b6228abae0f5b1d7641947361436f412098eee955f814949580f4733ebe1e987259f5762b76e6d11d5a31fc1d61f6814eebb47adb785a7bac9f591c4c1ebf1771fe171a63ca918ddbfbf8f0d0444d95614ccbd6535c611a58b9cd543d57af91907b2e93d78a3f63855aeec52e5a76a2cd8ee428ec2c89887cf67dcc767ba3d7853f683d8679b3d61e8540b78a00dfc144ee19383217a4c2bc9cebc61642387eebdfe0882d4e57176075b6dbe7a1a6e9bcd1c21d2f37b079f77abfc9f08a0fddd7b35eb52b5e13e1b7913fc28e8a000569f0345a72a1196a70d3b426390f7f1643d8c67b4aefb4094021111667977e51e68b6829cb5583c25314c58c1acf3e6553f82d06c20ba0d631f606e7a4dd5ce4116803e49e1f5a64bd514d6dafae00718a8f7acdffb3d54253e4c0f009b97cb1f3b10d695b7f97e2f987c1ac686817d87c8feffa5887b75d0b950e18fe8c10ebc36aed4d3e6bcfa68a3c0fbf2a90e5f1d560656dbb24f65103a0b2d26142ca6f069c132156372563f190299f08448e1e646482533c1ea2177c4623fc9445d2b7ce8becb17422b8743947bdb65e39e5b3b35102e1e3867e75ad29390d63e1ce29ee848bd43d0abf419ba766128670c5ae1c83aa53bb7fa06e98577eb78970177711659d777cd96a4c4f17f7be82bd9d57efcc228cf7c9d00cf639fdca54f5b1022b7a91c591063454c6ba4bb35867a48893b3cc038d750ac6762fcbe652bbe524c3b01c75487625011be9382380531cc7fac762ca74e40976bb834956e021c1b4a5f2b315b20bee2e6c02a36b86064af64e7327697c105269fe6ca406fbe9e91c121e4f20b3585e5eb8118c5dec168b5c897935e82eaf60f289e2169ab459bb65dfb98be20813f1808fdb3cb90c124ea83d0832be338c37010ed5dd0a18df6dcb969a5eb6c552700b535d44a5d5a6507c05b0846032388e0a9bc5e7c1bb231f47008f37663e5490d72f6a8d765503836ea50d18636e7c7e34ac7", 0x695, 0x0, 0x0, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18}, 0x18) r3 = dup(r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30}, 0x30}}, 0x0) 06:56:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000) 06:56:21 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) 06:56:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:56:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TIOCCONS(r2, 0x5425) 06:56:22 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x4, 0x0, 0x0) 06:56:22 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:56:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0x2f5, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xffffffffffffffb7}}, [""]}, 0x24}}, 0x0) r2 = gettid() tkill(r2, 0x1004000000013) 06:56:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x100000289) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 06:56:22 executing program 0: r0 = epoll_create(0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:56:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x540d, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5451, 0x0) 06:56:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 06:56:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:56:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDFONTOP_GET(r1, 0x4b72, 0x0) 06:56:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010801, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x6) tkill(r2, 0x1000000000016) 06:56:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 06:56:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:56:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x2, &(0x7f00000070c0)={0x3, 'nr0\x00'}) 06:56:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffee7}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r2, r3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:56:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) 06:56:24 executing program 0: r0 = socket(0x11, 0x2, 0x0) writev(r0, 0x0, 0x0) 06:56:24 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:56:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:56:24 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001600)) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 06:56:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = gettid() tkill(r3, 0x1000000000016) 06:56:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x443, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x0) 06:56:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, &(0x7f00000002c0)=0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x5450, 0x0) 06:56:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x7fff) 06:56:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc4, &(0x7f0000000080)={0x0, 0xffffff8c}}, 0x0) 06:56:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20020100) 06:56:25 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, 0x0) 06:56:30 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(r0, &(0x7f0000000000), 0x2, 0x0) 06:56:30 executing program 3: r0 = inotify_init() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 06:56:30 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_GETFSMAP(r0, 0x5451, 0x0) 06:56:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000001240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x4c01, 0x0) 06:56:30 executing program 0: msgget$private(0x0, 0x404) 06:56:30 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = inotify_init() r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, 0x0) 06:56:30 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 06:56:30 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x8903, &(0x7f0000000200)) 06:56:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) 06:56:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() write$cgroup_pid(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket(0xa, 0x3, 0x1) tkill(r2, 0x1000000000016) 06:56:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) dup2(r0, r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) 06:56:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:56:31 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003740)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0) 06:56:31 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x1000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 06:56:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x240400c0) 06:56:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_cred(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) 06:56:32 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x20000000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x0) [ 1666.995590][T30206] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/3' not defined. 06:56:32 executing program 1: r0 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x80) 06:56:32 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) dup3(r1, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8953, &(0x7f0000000000)=@add_del={0x2, 0x0}) 06:56:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r0, r1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000740)={@ipv4={[], [], @multicast2}}, 0x14) 06:56:32 executing program 4: r0 = epoll_create1(0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:56:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x8880) 06:56:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) ioctl$TCSETXW(r0, 0x5435, 0x0) 06:56:33 executing program 4: socket$nl_sock_diag(0x10, 0x3, 0x4) pipe2(&(0x7f0000000040), 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) 06:56:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) dup2(r1, r0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:56:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 06:56:33 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2004c882) 06:56:33 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x5450, 0x0) 06:56:33 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCSABS20(r1, 0x5451, 0x0) [ 1668.629792][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1668.690968][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:56:34 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) 06:56:34 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) 06:56:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) tkill(r2, 0x1000000000016) 06:56:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0) 06:56:34 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 06:56:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x5450, 0x0) 06:56:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40d0) 06:56:35 executing program 4: socketpair$unix(0x1, 0x800000200000005, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:56:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/96) 06:56:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffee7}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl(r1, 0x2, &(0x7f0000000380)) 06:56:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:56:35 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0x541b, 0x960000) 06:56:35 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:56:35 executing program 5: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:56:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f00000000c0)={'batadv0\x00'}) 06:56:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:56:36 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x5421, &(0x7f00000003c0)=""/166) 06:56:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, 0x0, &(0x7f0000000300)) 06:56:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:56:36 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:56:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x101d0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) dup3(r2, r4, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:56:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:56:36 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x58, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0) 06:56:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$TUNSETTXFILTER(r0, 0x5451, 0x0) 06:56:37 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000a40)) 06:56:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) 06:56:38 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)) 06:56:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) 06:56:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 06:56:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 06:56:39 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VT_GETSTATE(r0, 0x541b, &(0x7f0000000000)) 06:56:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 06:56:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$tun(r0, 0x0, 0x0) 06:56:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x301, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 06:56:39 executing program 1: r0 = eventfd(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={0x0}}, 0x0) 06:56:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) 06:56:40 executing program 4: r0 = socket$nl_generic(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x1c4, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}}, 0x0) 06:56:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x6c1) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 06:56:40 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x220e00, 0x0) 06:56:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 06:56:40 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5451, 0x0) 06:56:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x5450, 0x0) 06:56:40 executing program 5: tee(0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xfffffffffffffffe) 06:56:41 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)) 06:56:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0xe, 0x0, &(0x7f0000000000)) 06:56:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000080)='{vmnet1posix_acl_access@mime_type\x00', 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 06:56:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0xdc4b) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 06:56:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:56:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r1, r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 1676.435817][T30388] sock: process `syz-executor.0' is using obsolete getsockopt SO_BSDCOMPAT 06:56:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044800) 06:56:42 executing program 0: r0 = timerfd_create(0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x5450, 0x0) 06:56:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) write$vga_arbiter(r1, 0x0, 0x0) 06:56:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 06:56:42 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) r1 = getgid() fchown(r0, 0x0, r1) 06:56:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) [ 1678.072521][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1678.170783][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:56:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) dup2(r1, r2) dup2(r2, r0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x6, 0x0, 0x0) 06:56:43 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) dup2(r1, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:56:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14}, 0x14) sendto$inet(r1, &(0x7f00000002c0)="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", 0x695, 0x0, 0x0, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18}, 0x18) r3 = dup(r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 06:56:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x0, 0x0) tkill(r2, 0x1000000000016) 06:56:43 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 06:56:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 06:56:44 executing program 0: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) dup2(r1, r0) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) 06:56:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000013c0)={@multicast2, @loopback}, 0xc) 06:56:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040840) 06:56:44 executing program 5: pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000200)) 06:56:44 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 06:56:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x2, &(0x7f0000001c00)={'ip6gre0\x00', 0x0}) 06:56:45 executing program 0: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:56:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:56:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 06:56:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:56:45 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005780)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000c900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 06:56:46 executing program 2: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:56:46 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0xd, 0x0, 0x0) 06:56:46 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002300)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:56:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() tkill(r2, 0x1000000000016) 06:56:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r2, 0x1000000000016) 06:56:46 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x8001) 06:56:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$EVIOCGMASK(r0, 0x2, &(0x7f0000000280)={0x0, 0x0, 0x0}) 06:56:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002f00), 0x0, 0x2000, &(0x7f0000002fc0)={0x0, 0x3938700}) 06:56:47 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 06:56:47 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x5078fc) 06:56:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x10e, 0x3, 0x0, 0x2) 06:56:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x0) 06:56:47 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)) 06:56:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGBITSND(r1, 0x80404532, 0x0) 06:56:47 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) 06:56:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:56:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:56:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) recvfrom$unix(r1, 0x0, 0x0, 0x101, 0x0, 0x0) 06:56:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') write$P9_RSTATu(r0, 0x0, 0x0) 06:56:48 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x5421, &(0x7f0000000180)=""/224) 06:56:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_group_source_req(r1, 0x0, 0x7, 0x0, 0x0) 06:56:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, 0x0) 06:56:49 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZSET(r0, 0x5451, 0x0) 06:56:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) 06:56:49 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[], 0x54}}, 0x0) 06:56:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) fcntl$F_GET_RW_HINT(r1, 0xf, &(0x7f0000000080)) 06:56:50 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000001640)) 06:56:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000140)) 06:56:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) dup2(r0, r1) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) 06:56:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 06:56:50 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040080) 06:56:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x80) 06:56:50 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 06:56:50 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) dup3(r0, r2, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) 06:56:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) getsockopt$sock_timeval(r1, 0x1, 0x0, 0x0, 0x0) 06:56:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7}, 0x7) 06:56:50 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x5450, 0x0) 06:56:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000001600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 06:56:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:56:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) setsockopt$inet_buf(r1, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b80)='\x88])+\x00', 0x0) write(r2, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x3, 'veth1_macvtap\x00', {0x7200}, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:56:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), 0x4) 06:56:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfffffdb8}}, 0x0) 06:56:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x1) write$P9_RGETLOCK(r0, 0x0, 0x0) 06:56:51 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:56:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) connect$inet6(r1, &(0x7f0000000000), 0x1c) 06:56:52 executing program 2: r0 = inotify_init1(0x0) tee(0xffffffffffffffff, r0, 0x0, 0x0) 06:56:52 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x0) 06:56:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 06:56:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:56:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 06:56:52 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:56:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000140)) 06:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000d80)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:56:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 06:56:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x2, &(0x7f0000000180)) 06:56:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 06:56:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 06:56:53 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket(0xa, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @empty}, 0xc) 06:56:53 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:56:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000003c502ae6da0b08e8c88a553dd958e3a5ec3f24f0097be325aeb1d73bc18d52be947e642120309f9a993739b22fb531be83"], 0x24}}, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x890c, &(0x7f00000003c0)) 06:56:54 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) write$P9_RRENAME(r1, 0x0, 0x0) 06:56:54 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RLERROR(r0, 0x0, 0x0) 06:56:54 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x10) 06:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000b80)=0x80) dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) 06:56:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffee7}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 06:56:54 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 06:56:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000040)) r1 = dup(r0) r2 = gettid() sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 06:56:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net\x00') dup3(r1, r0, 0x0) fchdir(r0) 06:56:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0xffffffffffffff28}, 0x0) 06:56:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0xa) r3 = dup3(r0, r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:56:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:56:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) getpeername$inet(r1, 0x0, &(0x7f00000000c0)) 06:56:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'wg0\x00'}) 06:56:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001740), 0x4) 06:56:56 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r0, 0x5451, 0x0) 06:56:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:56:56 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:56:56 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8200, 0x0) 06:56:56 executing program 4: prctl$PR_SET_PDEATHSIG(0x23, 0x0) 06:56:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40004090) 06:56:57 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = dup2(r0, r0) sendfile(r0, r1, 0x0, 0x0) 06:56:57 executing program 2: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x21c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) 06:56:57 executing program 0: r0 = open(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) r1 = socket(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000000)={0x0, 0xffffff47, &(0x7f0000000680)={0x0}}, 0x0) 06:56:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 06:56:57 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) 06:56:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:56:57 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001300)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = dup3(r1, r0, 0x0) write$P9_RMKDIR(r2, 0x0, 0x0) 06:56:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) 06:56:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}}, 0x0) 06:56:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:56:58 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:56:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r0, 0x5451, 0x0) 06:56:58 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000480)) 06:56:58 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x5451, 0x0) 06:56:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x50) 06:56:59 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getuid() r1 = getgid() lchown(&(0x7f0000000080)='./file0\x00', r0, r1) 06:56:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x20040001) recvfrom$unix(r1, &(0x7f0000001700)=""/4096, 0x1000, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 06:56:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 06:56:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="0001000000000000c2"], 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:56:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') write$tun(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1) 06:56:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 06:56:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x200408c4) [ 1694.719787][T30779] syz-executor.4 (30779): /proc/30775/oom_adj is deprecated, please use /proc/30775/oom_score_adj instead. 06:57:00 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002300)) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:57:00 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 06:57:00 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 06:57:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) 06:57:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_udp_int(r1, 0x29, 0x13, 0x0, 0x0) 06:57:00 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 06:57:00 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000000)="b2", 0x1, 0x0, 0x0, 0x1a) recvfrom$inet6(r0, 0x0, 0x0, 0x2142, 0x0, 0x0) 06:57:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'sit0\x00', {}, 0xfffe}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000100)=""/102, 0x80b7}) 06:57:01 executing program 4: r0 = inotify_init1(0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:57:01 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x5451, 0x0) 06:57:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x1) 06:57:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr\x00') read$eventfd(r0, 0x0, 0x0) 06:57:01 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x5450, 0x0) 06:57:01 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x5450, 0x0) 06:57:02 executing program 4: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x38520622cd74bb8f) 06:57:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:57:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) 06:57:02 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000001800)='/dev/vcs#\x00', 0x34, 0x0) ioctl$EVIOCGABS0(r0, 0x5450, 0x0) 06:57:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) write$tun(r2, 0x0, 0x2e) 06:57:02 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14}, 0x14) write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[], 0xff7a) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0x14) 06:57:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x6, 0x0, 0x0) 06:57:03 executing program 3: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:57:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 06:57:03 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = dup3(r1, r0, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) [ 1698.432099][T30845] not chained 10000 origins [ 1698.438107][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1698.446878][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.459038][T30845] Call Trace: [ 1698.462422][T30845] dump_stack+0x21c/0x280 [ 1698.466849][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1698.472944][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1698.479615][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1698.484916][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1698.490567][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1698.496695][T30845] ? _copy_from_user+0x201/0x310 [ 1698.501903][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1698.507276][T30845] __msan_chain_origin+0x57/0xa0 [ 1698.516975][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1698.522109][T30845] get_compat_msghdr+0x108/0x2b0 [ 1698.527398][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1698.532077][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1698.538319][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1698.544056][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1698.549336][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1698.554114][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1698.559403][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1698.565386][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1698.571655][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1698.579394][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1698.585643][T30845] __do_fast_syscall_32+0x129/0x180 [ 1698.590944][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1698.597006][T30845] do_SYSENTER_32+0x73/0x90 [ 1698.601548][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1698.608686][T30845] RIP: 0023:0xf7f28549 [ 1698.613096][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1698.633680][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1698.642086][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1698.650400][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1698.658633][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1698.666684][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1698.674646][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.682615][T30845] Uninit was stored to memory at: [ 1698.688171][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1698.693904][T30845] __msan_chain_origin+0x57/0xa0 [ 1698.699010][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1698.704119][T30845] get_compat_msghdr+0x108/0x2b0 [ 1698.709053][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1698.713726][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1698.718482][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1698.724551][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1698.730894][T30845] __do_fast_syscall_32+0x129/0x180 [ 1698.736173][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1698.741035][T30845] do_SYSENTER_32+0x73/0x90 [ 1698.745795][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1698.752211][T30845] [ 1698.754526][T30845] Uninit was stored to memory at: [ 1698.759740][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1698.765457][T30845] __msan_chain_origin+0x57/0xa0 [ 1698.770584][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1698.775961][T30845] get_compat_msghdr+0x108/0x2b0 [ 1698.781087][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1698.786103][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1698.790785][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1698.797017][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1698.803250][T30845] __do_fast_syscall_32+0x129/0x180 [ 1698.808556][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1698.813400][T30845] do_SYSENTER_32+0x73/0x90 [ 1698.819029][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1698.826121][T30845] [ 1698.829217][T30845] Uninit was stored to memory at: [ 1698.834422][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1698.840659][T30845] __msan_chain_origin+0x57/0xa0 [ 1698.845586][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1698.850689][T30845] get_compat_msghdr+0x108/0x2b0 [ 1698.855622][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1698.860662][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1698.865497][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1698.871776][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1698.878241][T30845] __do_fast_syscall_32+0x129/0x180 [ 1698.883453][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1698.889296][T30845] do_SYSENTER_32+0x73/0x90 [ 1698.894331][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1698.900655][T30845] [ 1698.902988][T30845] Uninit was stored to memory at: [ 1698.908409][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1698.915374][T30845] __msan_chain_origin+0x57/0xa0 [ 1698.920490][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1698.926115][T30845] get_compat_msghdr+0x108/0x2b0 [ 1698.931058][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1698.935643][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1698.940311][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1698.946374][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1698.952521][T30845] __do_fast_syscall_32+0x129/0x180 [ 1698.957711][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1698.962563][T30845] do_SYSENTER_32+0x73/0x90 [ 1698.967083][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1698.973564][T30845] [ 1698.975898][T30845] Uninit was stored to memory at: [ 1698.981006][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1698.986721][T30845] __msan_chain_origin+0x57/0xa0 [ 1698.997150][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1699.002381][T30845] get_compat_msghdr+0x108/0x2b0 [ 1699.007409][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1699.011991][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1699.016666][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1699.022837][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1699.030994][T30845] __do_fast_syscall_32+0x129/0x180 [ 1699.037199][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1699.042134][T30845] do_SYSENTER_32+0x73/0x90 [ 1699.046632][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1699.052970][T30845] [ 1699.055295][T30845] Uninit was stored to memory at: [ 1699.060503][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1699.066219][T30845] __msan_chain_origin+0x57/0xa0 [ 1699.071151][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1699.076347][T30845] get_compat_msghdr+0x108/0x2b0 [ 1699.081279][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1699.085784][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1699.090891][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1699.096967][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1699.103576][T30845] __do_fast_syscall_32+0x129/0x180 [ 1699.109057][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1699.113904][T30845] do_SYSENTER_32+0x73/0x90 [ 1699.119040][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1699.125528][T30845] [ 1699.127843][T30845] Uninit was stored to memory at: [ 1699.132873][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1699.138610][T30845] __msan_chain_origin+0x57/0xa0 [ 1699.143550][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1699.148853][T30845] get_compat_msghdr+0x108/0x2b0 [ 1699.153789][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1699.158304][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1699.162987][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1699.169062][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1699.175420][T30845] __do_fast_syscall_32+0x129/0x180 [ 1699.182831][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1699.187964][T30845] do_SYSENTER_32+0x73/0x90 [ 1699.193636][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1699.202059][T30845] [ 1699.205448][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1699.213824][T30845] do_recvmmsg+0xc2/0x22e0 [ 1699.222190][T30845] do_recvmmsg+0xc2/0x22e0 06:57:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x5451, 0x0) 06:57:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:57:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:57:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TCSETX(r1, 0x5433, 0x0) [ 1700.699301][T30845] not chained 20000 origins [ 1700.703858][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1700.712528][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1700.722842][T30845] Call Trace: [ 1700.726154][T30845] dump_stack+0x21c/0x280 [ 1700.730753][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1700.736505][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1700.742609][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1700.747920][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1700.753577][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1700.759749][T30845] ? _copy_from_user+0x201/0x310 [ 1700.764713][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1700.770111][T30845] __msan_chain_origin+0x57/0xa0 [ 1700.775673][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1700.781867][T30845] get_compat_msghdr+0x108/0x2b0 [ 1700.786889][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1700.791513][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1700.797201][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1700.802879][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1700.808702][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1700.813572][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1700.818643][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1700.824680][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1700.830178][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1700.836535][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1700.842716][T30845] __do_fast_syscall_32+0x129/0x180 [ 1700.848127][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1700.853004][T30845] do_SYSENTER_32+0x73/0x90 [ 1700.857950][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1700.864466][T30845] RIP: 0023:0xf7f28549 [ 1700.868575][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1700.889503][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1700.898016][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1700.906188][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1700.914373][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1700.922363][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1700.930432][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.939454][T30845] Uninit was stored to memory at: [ 1700.944508][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1700.950247][T30845] __msan_chain_origin+0x57/0xa0 [ 1700.955205][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1700.960331][T30845] get_compat_msghdr+0x108/0x2b0 [ 1700.965369][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1700.969914][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1700.974606][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1700.980701][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1700.987741][T30845] __do_fast_syscall_32+0x129/0x180 [ 1700.993218][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1700.998085][T30845] do_SYSENTER_32+0x73/0x90 [ 1701.002611][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1701.009107][T30845] [ 1701.011483][T30845] Uninit was stored to memory at: [ 1701.016528][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1701.022349][T30845] __msan_chain_origin+0x57/0xa0 [ 1701.027297][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1701.032421][T30845] get_compat_msghdr+0x108/0x2b0 [ 1701.037371][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1701.041895][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1701.046589][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1701.052690][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1701.058960][T30845] __do_fast_syscall_32+0x129/0x180 [ 1701.064298][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1701.069254][T30845] do_SYSENTER_32+0x73/0x90 [ 1701.073883][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1701.080201][T30845] [ 1701.082538][T30845] Uninit was stored to memory at: [ 1701.087599][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1701.093420][T30845] __msan_chain_origin+0x57/0xa0 [ 1701.098399][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1701.103535][T30845] get_compat_msghdr+0x108/0x2b0 [ 1701.108488][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1701.113985][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1701.118873][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1701.124965][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1701.131135][T30845] __do_fast_syscall_32+0x129/0x180 [ 1701.136351][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1701.141604][T30845] do_SYSENTER_32+0x73/0x90 [ 1701.146382][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1701.152708][T30845] [ 1701.155075][T30845] Uninit was stored to memory at: [ 1701.160213][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1701.166049][T30845] __msan_chain_origin+0x57/0xa0 [ 1701.171517][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1701.176727][T30845] get_compat_msghdr+0x108/0x2b0 [ 1701.181680][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1701.186199][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1701.190890][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1701.196971][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1701.203142][T30845] __do_fast_syscall_32+0x129/0x180 [ 1701.208354][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1701.213220][T30845] do_SYSENTER_32+0x73/0x90 [ 1701.217827][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1701.224257][T30845] [ 1701.226945][T30845] Uninit was stored to memory at: [ 1701.232636][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1701.238464][T30845] __msan_chain_origin+0x57/0xa0 [ 1701.243499][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1701.248622][T30845] get_compat_msghdr+0x108/0x2b0 [ 1701.253574][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1701.258699][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1701.264293][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1701.271174][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1701.277433][T30845] __do_fast_syscall_32+0x129/0x180 [ 1701.282737][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1701.287603][T30845] do_SYSENTER_32+0x73/0x90 [ 1701.292209][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1701.298668][T30845] [ 1701.300996][T30845] Uninit was stored to memory at: [ 1701.306127][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1701.311886][T30845] __msan_chain_origin+0x57/0xa0 [ 1701.316863][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1701.322253][T30845] get_compat_msghdr+0x108/0x2b0 [ 1701.327314][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1701.332668][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1701.337359][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1701.343528][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1701.351885][T30845] __do_fast_syscall_32+0x129/0x180 [ 1701.357979][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1701.362846][T30845] do_SYSENTER_32+0x73/0x90 [ 1701.367771][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1701.374201][T30845] [ 1701.376535][T30845] Uninit was stored to memory at: [ 1701.383095][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1701.388834][T30845] __msan_chain_origin+0x57/0xa0 [ 1701.394265][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1701.399399][T30845] get_compat_msghdr+0x108/0x2b0 [ 1701.404354][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1701.408874][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1701.413569][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1701.419754][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1701.425921][T30845] __do_fast_syscall_32+0x129/0x180 [ 1701.431230][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1701.440258][T30845] do_SYSENTER_32+0x73/0x90 [ 1701.444775][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1701.451628][T30845] [ 1701.454160][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1701.461806][T30845] do_recvmmsg+0xc2/0x22e0 [ 1701.466323][T30845] do_recvmmsg+0xc2/0x22e0 [ 1702.594479][T30845] not chained 30000 origins [ 1702.599141][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1702.607990][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.618792][T30845] Call Trace: [ 1702.622099][T30845] dump_stack+0x21c/0x280 [ 1702.626615][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1702.632362][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1702.639308][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1702.644537][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1702.650178][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1702.656365][T30845] ? _copy_from_user+0x201/0x310 [ 1702.661306][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1702.666514][T30845] __msan_chain_origin+0x57/0xa0 [ 1702.671460][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1702.676582][T30845] get_compat_msghdr+0x108/0x2b0 [ 1702.681615][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1702.686126][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1702.691340][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1702.696974][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1702.702262][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1702.707030][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1702.711722][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1702.717547][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1702.722764][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1702.728868][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1702.735037][T30845] __do_fast_syscall_32+0x129/0x180 [ 1702.740431][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1702.745285][T30845] do_SYSENTER_32+0x73/0x90 [ 1702.749791][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1702.756370][T30845] RIP: 0023:0xf7f28549 [ 1702.760446][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1702.780051][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1702.788725][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1702.796704][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1702.804691][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1702.812750][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1702.820725][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1702.828697][T30845] Uninit was stored to memory at: [ 1702.833751][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1702.839483][T30845] __msan_chain_origin+0x57/0xa0 [ 1702.844439][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1702.849553][T30845] get_compat_msghdr+0x108/0x2b0 [ 1702.854492][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1702.858997][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1702.863764][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1702.869830][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1702.875985][T30845] __do_fast_syscall_32+0x129/0x180 [ 1702.881178][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1702.886034][T30845] do_SYSENTER_32+0x73/0x90 [ 1702.890535][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1702.896885][T30845] [ 1702.899206][T30845] Uninit was stored to memory at: [ 1702.904331][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1702.910051][T30845] __msan_chain_origin+0x57/0xa0 [ 1702.914988][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1702.920584][T30845] get_compat_msghdr+0x108/0x2b0 [ 1702.925634][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1702.930150][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1702.934826][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1702.940980][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1702.954453][T30845] __do_fast_syscall_32+0x129/0x180 [ 1702.959748][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1702.964633][T30845] do_SYSENTER_32+0x73/0x90 [ 1702.969238][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1702.975550][T30845] [ 1702.978219][T30845] Uninit was stored to memory at: [ 1702.983434][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1702.989420][T30845] __msan_chain_origin+0x57/0xa0 [ 1702.994368][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1702.999677][T30845] get_compat_msghdr+0x108/0x2b0 [ 1703.004617][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1703.009131][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1703.013912][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1703.020114][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1703.026306][T30845] __do_fast_syscall_32+0x129/0x180 [ 1703.031532][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1703.036474][T30845] do_SYSENTER_32+0x73/0x90 [ 1703.040981][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1703.047843][T30845] [ 1703.050440][T30845] Uninit was stored to memory at: [ 1703.055700][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1703.061554][T30845] __msan_chain_origin+0x57/0xa0 [ 1703.067205][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1703.072734][T30845] get_compat_msghdr+0x108/0x2b0 [ 1703.078403][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1703.083082][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1703.088041][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1703.094110][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1703.100354][T30845] __do_fast_syscall_32+0x129/0x180 [ 1703.105585][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1703.110843][T30845] do_SYSENTER_32+0x73/0x90 [ 1703.115698][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1703.122012][T30845] [ 1703.124335][T30845] Uninit was stored to memory at: [ 1703.129652][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1703.135505][T30845] __msan_chain_origin+0x57/0xa0 [ 1703.140465][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1703.145749][T30845] get_compat_msghdr+0x108/0x2b0 [ 1703.150789][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1703.155292][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1703.160420][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1703.166667][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1703.173001][T30845] __do_fast_syscall_32+0x129/0x180 [ 1703.178375][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1703.183235][T30845] do_SYSENTER_32+0x73/0x90 [ 1703.189130][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1703.195532][T30845] [ 1703.198054][T30845] Uninit was stored to memory at: [ 1703.203107][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1703.208849][T30845] __msan_chain_origin+0x57/0xa0 [ 1703.213791][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1703.219085][T30845] get_compat_msghdr+0x108/0x2b0 [ 1703.224031][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1703.228636][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1703.233347][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1703.239415][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1703.245574][T30845] __do_fast_syscall_32+0x129/0x180 [ 1703.250774][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1703.255728][T30845] do_SYSENTER_32+0x73/0x90 [ 1703.260752][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1703.267260][T30845] [ 1703.269579][T30845] Uninit was stored to memory at: [ 1703.274610][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1703.280331][T30845] __msan_chain_origin+0x57/0xa0 [ 1703.285292][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1703.290515][T30845] get_compat_msghdr+0x108/0x2b0 [ 1703.295480][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1703.300072][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1703.304924][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1703.310992][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1703.317148][T30845] __do_fast_syscall_32+0x129/0x180 [ 1703.322350][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1703.328053][T30845] do_SYSENTER_32+0x73/0x90 [ 1703.333563][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1703.339879][T30845] [ 1703.342201][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1703.349231][T30845] do_recvmmsg+0xc2/0x22e0 [ 1703.357330][T30845] do_recvmmsg+0xc2/0x22e0 [ 1703.678865][T30845] not chained 40000 origins [ 1703.684346][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1703.694173][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.707706][T30845] Call Trace: [ 1703.711034][T30845] dump_stack+0x21c/0x280 [ 1703.715376][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1703.721108][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1703.727386][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1703.732597][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1703.738527][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1703.744697][T30845] ? _copy_from_user+0x201/0x310 [ 1703.749757][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1703.755245][T30845] __msan_chain_origin+0x57/0xa0 [ 1703.760213][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1703.765364][T30845] get_compat_msghdr+0x108/0x2b0 [ 1703.770319][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1703.774833][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1703.780570][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1703.787314][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1703.792896][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1703.797695][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1703.803630][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1703.809531][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1703.814739][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1703.821080][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1703.827259][T30845] __do_fast_syscall_32+0x129/0x180 [ 1703.832473][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1703.837328][T30845] do_SYSENTER_32+0x73/0x90 [ 1703.841931][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1703.848956][T30845] RIP: 0023:0xf7f28549 [ 1703.853212][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1703.876487][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1703.885986][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1703.894106][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1703.902088][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1703.910083][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1703.919191][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.927598][T30845] Uninit was stored to memory at: [ 1703.932640][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1703.938473][T30845] __msan_chain_origin+0x57/0xa0 [ 1703.943428][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1703.948806][T30845] get_compat_msghdr+0x108/0x2b0 [ 1703.953768][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1703.958627][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1703.963313][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1703.969397][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1703.975557][T30845] __do_fast_syscall_32+0x129/0x180 [ 1703.980763][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1703.985757][T30845] do_SYSENTER_32+0x73/0x90 [ 1703.991868][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1703.998283][T30845] [ 1704.000612][T30845] Uninit was stored to memory at: [ 1704.005753][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1704.011570][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.016514][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.021631][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.026924][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.032131][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1704.036830][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1704.042923][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1704.051438][T30845] __do_fast_syscall_32+0x129/0x180 [ 1704.056768][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1704.061638][T30845] do_SYSENTER_32+0x73/0x90 [ 1704.069624][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1704.076579][T30845] [ 1704.078900][T30845] Uninit was stored to memory at: [ 1704.083935][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1704.089693][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.094717][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.100442][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.105397][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.113921][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1704.118619][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1704.125392][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1704.131996][T30845] __do_fast_syscall_32+0x129/0x180 [ 1704.137460][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1704.143751][T30845] do_SYSENTER_32+0x73/0x90 [ 1704.148372][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1704.155383][T30845] [ 1704.157703][T30845] Uninit was stored to memory at: [ 1704.162739][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1704.168844][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.173869][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.179064][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.184089][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.188596][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1704.193277][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1704.199522][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1704.205856][T30845] __do_fast_syscall_32+0x129/0x180 [ 1704.211061][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1704.216000][T30845] do_SYSENTER_32+0x73/0x90 [ 1704.221313][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1704.227642][T30845] [ 1704.229965][T30845] Uninit was stored to memory at: [ 1704.234996][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1704.240983][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.246211][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.252178][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.258644][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.263627][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1704.268432][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1704.274617][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1704.280776][T30845] __do_fast_syscall_32+0x129/0x180 [ 1704.285980][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1704.290839][T30845] do_SYSENTER_32+0x73/0x90 [ 1704.296127][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1704.302439][T30845] [ 1704.304760][T30845] Uninit was stored to memory at: [ 1704.309977][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1704.315700][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.320640][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.325941][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.331060][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.335652][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1704.340431][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1704.346529][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1704.355062][T30845] __do_fast_syscall_32+0x129/0x180 [ 1704.360443][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1704.365387][T30845] do_SYSENTER_32+0x73/0x90 [ 1704.370590][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1704.376944][T30845] [ 1704.379264][T30845] Uninit was stored to memory at: [ 1704.384295][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1704.390033][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.395057][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.400339][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.405280][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.409972][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1704.414674][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1704.420974][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1704.428804][T30845] __do_fast_syscall_32+0x129/0x180 [ 1704.434002][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1704.438855][T30845] do_SYSENTER_32+0x73/0x90 [ 1704.443448][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1704.449847][T30845] [ 1704.452172][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1704.458953][T30845] do_recvmmsg+0xc2/0x22e0 [ 1704.463841][T30845] do_recvmmsg+0xc2/0x22e0 [ 1704.718848][T30845] not chained 50000 origins [ 1704.723420][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1704.734327][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1704.744572][T30845] Call Trace: [ 1704.747876][T30845] dump_stack+0x21c/0x280 [ 1704.752222][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1704.758138][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1704.764417][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1704.769900][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1704.776434][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1704.783814][T30845] ? _copy_from_user+0x201/0x310 [ 1704.789722][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1704.794936][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.800668][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.805803][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.810869][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.815419][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1704.820836][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1704.827583][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1704.833241][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1704.838449][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1704.843166][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1704.848974][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1704.854269][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1704.860625][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1704.867252][T30845] __do_fast_syscall_32+0x129/0x180 [ 1704.872575][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1704.877794][T30845] do_SYSENTER_32+0x73/0x90 [ 1704.883276][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1704.889725][T30845] RIP: 0023:0xf7f28549 [ 1704.894062][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1704.913674][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1704.922097][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1704.930346][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1704.939443][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1704.947695][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1704.955786][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1704.963816][T30845] Uninit was stored to memory at: [ 1704.968966][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1704.974694][T30845] __msan_chain_origin+0x57/0xa0 [ 1704.980006][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1704.985335][T30845] get_compat_msghdr+0x108/0x2b0 [ 1704.990323][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1704.995205][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.000066][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.006676][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.012846][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.018055][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.023256][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.028728][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.035226][T30845] [ 1705.037699][T30845] Uninit was stored to memory at: [ 1705.043484][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1705.049483][T30845] __msan_chain_origin+0x57/0xa0 [ 1705.054431][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1705.059635][T30845] get_compat_msghdr+0x108/0x2b0 [ 1705.066272][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1705.070962][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.075726][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.083679][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.090624][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.096022][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.101232][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.109141][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.115451][T30845] [ 1705.117766][T30845] Uninit was stored to memory at: [ 1705.122799][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1705.128537][T30845] __msan_chain_origin+0x57/0xa0 [ 1705.133483][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1705.138688][T30845] get_compat_msghdr+0x108/0x2b0 [ 1705.143628][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1705.148481][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.153161][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.159229][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.165386][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.170586][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.175459][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.179976][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.186283][T30845] [ 1705.188597][T30845] Uninit was stored to memory at: [ 1705.193623][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1705.199515][T30845] __msan_chain_origin+0x57/0xa0 [ 1705.204452][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1705.209562][T30845] get_compat_msghdr+0x108/0x2b0 [ 1705.215589][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1705.220205][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.224881][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.230949][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.237537][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.242819][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.247690][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.252194][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.258504][T30845] [ 1705.260818][T30845] Uninit was stored to memory at: [ 1705.266277][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1705.271992][T30845] __msan_chain_origin+0x57/0xa0 [ 1705.276928][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1705.282040][T30845] get_compat_msghdr+0x108/0x2b0 [ 1705.287063][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1705.291568][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.296797][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.302876][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.309029][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.314238][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.319094][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.323782][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.330613][T30845] [ 1705.332938][T30845] Uninit was stored to memory at: [ 1705.337968][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1705.343705][T30845] __msan_chain_origin+0x57/0xa0 [ 1705.348661][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1705.354295][T30845] get_compat_msghdr+0x108/0x2b0 [ 1705.359665][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1705.364172][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.368848][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.374911][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.381102][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.386437][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.391286][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.395785][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.402090][T30845] [ 1705.404524][T30845] Uninit was stored to memory at: [ 1705.409549][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1705.418572][T30845] __msan_chain_origin+0x57/0xa0 [ 1705.423505][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1705.428635][T30845] get_compat_msghdr+0x108/0x2b0 [ 1705.433658][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1705.438886][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.443661][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.450363][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.456545][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.462204][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.467084][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.472542][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.478875][T30845] [ 1705.481215][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1705.488062][T30845] do_recvmmsg+0xc2/0x22e0 [ 1705.492501][T30845] do_recvmmsg+0xc2/0x22e0 [ 1705.811602][T30845] not chained 60000 origins [ 1705.816608][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1705.825835][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.837440][T30845] Call Trace: [ 1705.840763][T30845] dump_stack+0x21c/0x280 [ 1705.845105][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1705.850860][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1705.857195][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1705.862507][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1705.868204][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1705.875042][T30845] ? _copy_from_user+0x201/0x310 [ 1705.880209][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1705.885638][T30845] __msan_chain_origin+0x57/0xa0 [ 1705.890884][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1705.896017][T30845] get_compat_msghdr+0x108/0x2b0 [ 1705.901203][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1705.906258][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1705.912004][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1705.917742][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1705.923145][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1705.928018][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1705.932712][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1705.938787][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1705.944291][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1705.950705][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1705.956957][T30845] __do_fast_syscall_32+0x129/0x180 [ 1705.962186][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1705.967102][T30845] do_SYSENTER_32+0x73/0x90 [ 1705.971622][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1705.978044][T30845] RIP: 0023:0xf7f28549 [ 1705.982956][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1706.004174][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1706.012703][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1706.020951][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1706.029923][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1706.038546][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1706.046715][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.056136][T30845] Uninit was stored to memory at: [ 1706.061311][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1706.067408][T30845] __msan_chain_origin+0x57/0xa0 [ 1706.072860][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1706.078076][T30845] get_compat_msghdr+0x108/0x2b0 [ 1706.083414][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1706.088383][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1706.093267][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1706.099354][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1706.105981][T30845] __do_fast_syscall_32+0x129/0x180 [ 1706.111466][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1706.116426][T30845] do_SYSENTER_32+0x73/0x90 [ 1706.121860][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1706.130360][T30845] [ 1706.132731][T30845] Uninit was stored to memory at: [ 1706.138564][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1706.144902][T30845] __msan_chain_origin+0x57/0xa0 [ 1706.150469][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1706.155939][T30845] get_compat_msghdr+0x108/0x2b0 [ 1706.161247][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1706.165767][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1706.170724][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1706.177077][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1706.183414][T30845] __do_fast_syscall_32+0x129/0x180 [ 1706.188639][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1706.193767][T30845] do_SYSENTER_32+0x73/0x90 [ 1706.198394][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1706.205254][T30845] [ 1706.207848][T30845] Uninit was stored to memory at: [ 1706.213449][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1706.220208][T30845] __msan_chain_origin+0x57/0xa0 [ 1706.225271][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1706.230982][T30845] get_compat_msghdr+0x108/0x2b0 [ 1706.236573][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1706.241863][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1706.247049][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1706.254463][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1706.262345][T30845] __do_fast_syscall_32+0x129/0x180 [ 1706.268554][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1706.273875][T30845] do_SYSENTER_32+0x73/0x90 [ 1706.279150][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1706.285608][T30845] [ 1706.288045][T30845] Uninit was stored to memory at: [ 1706.293189][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1706.299133][T30845] __msan_chain_origin+0x57/0xa0 [ 1706.304454][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1706.309934][T30845] get_compat_msghdr+0x108/0x2b0 [ 1706.315471][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1706.320419][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1706.325901][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1706.332928][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1706.339718][T30845] __do_fast_syscall_32+0x129/0x180 [ 1706.345068][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1706.350125][T30845] do_SYSENTER_32+0x73/0x90 [ 1706.354815][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1706.361137][T30845] [ 1706.363480][T30845] Uninit was stored to memory at: [ 1706.368529][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1706.374360][T30845] __msan_chain_origin+0x57/0xa0 [ 1706.379876][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1706.385096][T30845] get_compat_msghdr+0x108/0x2b0 [ 1706.390234][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1706.394943][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1706.400462][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1706.406813][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1706.413098][T30845] __do_fast_syscall_32+0x129/0x180 [ 1706.419081][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1706.424299][T30845] do_SYSENTER_32+0x73/0x90 [ 1706.428992][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1706.435670][T30845] [ 1706.443120][T30845] Uninit was stored to memory at: [ 1706.448247][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1706.453978][T30845] __msan_chain_origin+0x57/0xa0 [ 1706.459789][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1706.465490][T30845] get_compat_msghdr+0x108/0x2b0 [ 1706.470970][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1706.475483][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1706.480367][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1706.487087][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1706.494317][T30845] __do_fast_syscall_32+0x129/0x180 [ 1706.499948][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1706.505385][T30845] do_SYSENTER_32+0x73/0x90 [ 1706.510004][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1706.516875][T30845] [ 1706.519205][T30845] Uninit was stored to memory at: [ 1706.524421][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1706.530500][T30845] __msan_chain_origin+0x57/0xa0 [ 1706.535744][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1706.540909][T30845] get_compat_msghdr+0x108/0x2b0 [ 1706.546211][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1706.550733][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1706.555990][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1706.562420][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1706.570828][T30845] __do_fast_syscall_32+0x129/0x180 [ 1706.576282][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1706.581511][T30845] do_SYSENTER_32+0x73/0x90 [ 1706.586026][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1706.592368][T30845] [ 1706.594714][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1706.602372][T30845] do_recvmmsg+0xc2/0x22e0 [ 1706.612778][T30845] do_recvmmsg+0xc2/0x22e0 [ 1706.946816][T30845] not chained 70000 origins [ 1706.952715][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1706.963047][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.973369][T30845] Call Trace: [ 1706.976941][T30845] dump_stack+0x21c/0x280 [ 1706.982173][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1706.988098][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1706.994611][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1707.000534][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1707.006705][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1707.013847][T30845] ? _copy_from_user+0x201/0x310 [ 1707.018889][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1707.024472][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.029946][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.035835][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.041221][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.045741][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1707.052019][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1707.058301][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1707.063799][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1707.069163][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.075597][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1707.082376][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1707.087857][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.094641][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.101202][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.107038][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.112168][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.116941][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.123646][T30845] RIP: 0023:0xf7f28549 [ 1707.128064][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1707.148825][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1707.157252][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1707.165702][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1707.174125][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1707.182184][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1707.190415][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1707.198657][T30845] Uninit was stored to memory at: [ 1707.203862][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1707.210188][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.215652][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.221934][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.228270][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.232922][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.237871][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.244172][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.251795][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.257906][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.262945][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.267564][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.273985][T30845] [ 1707.276472][T30845] Uninit was stored to memory at: [ 1707.283584][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1707.290474][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.295804][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.301836][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.307058][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.311573][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.316263][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.323218][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.330786][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.336520][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.341444][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.346052][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.352468][T30845] [ 1707.354795][T30845] Uninit was stored to memory at: [ 1707.360105][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1707.365928][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.370959][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.376807][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.381908][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.386651][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.392698][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.402433][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.409798][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.415700][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.420830][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.426215][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.433086][T30845] [ 1707.436285][T30845] Uninit was stored to memory at: [ 1707.441633][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1707.447556][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.453577][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.459528][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.465967][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.470841][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.475977][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.482828][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.489941][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.495977][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.500959][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.506344][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.513233][T30845] [ 1707.515674][T30845] Uninit was stored to memory at: [ 1707.521094][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1707.527270][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.532567][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.539752][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.545227][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.550263][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.555954][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.563067][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.570818][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.577224][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.582771][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.587727][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.594713][T30845] [ 1707.598269][T30845] Uninit was stored to memory at: [ 1707.603463][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1707.609552][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.615498][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.620982][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.626153][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.630852][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.635909][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.642423][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.649022][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.655099][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.661997][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.666799][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.673808][T30845] [ 1707.676151][T30845] Uninit was stored to memory at: [ 1707.681409][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1707.687414][T30845] __msan_chain_origin+0x57/0xa0 [ 1707.692536][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1707.697734][T30845] get_compat_msghdr+0x108/0x2b0 [ 1707.703127][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1707.707924][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1707.712796][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1707.721745][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1707.728787][T30845] __do_fast_syscall_32+0x129/0x180 [ 1707.735466][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1707.741042][T30845] do_SYSENTER_32+0x73/0x90 [ 1707.746281][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1707.753907][T30845] [ 1707.756252][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1707.763669][T30845] do_recvmmsg+0xc2/0x22e0 [ 1707.768488][T30845] do_recvmmsg+0xc2/0x22e0 06:57:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) 06:57:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_FS_INFO(r0, 0x5450, 0x0) [ 1708.402683][T30845] not chained 80000 origins [ 1708.407522][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1708.416432][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1708.427014][T30845] Call Trace: [ 1708.430876][T30845] dump_stack+0x21c/0x280 [ 1708.435673][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1708.441834][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1708.447424][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1708.453355][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1708.459110][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1708.465730][T30845] ? _copy_from_user+0x201/0x310 [ 1708.471575][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1708.476806][T30845] __msan_chain_origin+0x57/0xa0 [ 1708.483160][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1708.489169][T30845] get_compat_msghdr+0x108/0x2b0 [ 1708.494753][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1708.499687][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1708.505512][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1708.511187][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1708.517170][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1708.523357][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1708.528414][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1708.534415][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1708.541441][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1708.548332][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1708.554953][T30845] __do_fast_syscall_32+0x129/0x180 [ 1708.560849][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1708.565978][T30845] do_SYSENTER_32+0x73/0x90 [ 1708.571116][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1708.578151][T30845] RIP: 0023:0xf7f28549 [ 1708.582765][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1708.603421][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1708.613097][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1708.622668][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1708.632223][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1708.640888][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1708.649378][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1708.658177][T30845] Uninit was stored to memory at: [ 1708.663506][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1708.670796][T30845] __msan_chain_origin+0x57/0xa0 [ 1708.676417][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1708.682000][T30845] get_compat_msghdr+0x108/0x2b0 [ 1708.686970][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1708.691509][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1708.696352][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1708.702731][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1708.709094][T30845] __do_fast_syscall_32+0x129/0x180 [ 1708.714687][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1708.720000][T30845] do_SYSENTER_32+0x73/0x90 [ 1708.725144][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1708.732924][T30845] [ 1708.739374][T30845] Uninit was stored to memory at: [ 1708.745113][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1708.751053][T30845] __msan_chain_origin+0x57/0xa0 [ 1708.756464][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1708.762310][T30845] get_compat_msghdr+0x108/0x2b0 [ 1708.768601][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1708.774448][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1708.779681][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1708.786337][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1708.793612][T30845] __do_fast_syscall_32+0x129/0x180 [ 1708.800514][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1708.805574][T30845] do_SYSENTER_32+0x73/0x90 [ 1708.810638][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1708.817245][T30845] [ 1708.820353][T30845] Uninit was stored to memory at: [ 1708.825991][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1708.832117][T30845] __msan_chain_origin+0x57/0xa0 [ 1708.838864][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1708.846886][T30845] get_compat_msghdr+0x108/0x2b0 [ 1708.852598][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1708.857314][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1708.862634][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1708.869129][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1708.875700][T30845] __do_fast_syscall_32+0x129/0x180 [ 1708.883108][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1708.888951][T30845] do_SYSENTER_32+0x73/0x90 [ 1708.894283][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1708.901405][T30845] [ 1708.903846][T30845] Uninit was stored to memory at: [ 1708.909077][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1708.915012][T30845] __msan_chain_origin+0x57/0xa0 [ 1708.921032][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1708.927075][T30845] get_compat_msghdr+0x108/0x2b0 [ 1708.932770][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1708.937688][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1708.942942][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1708.949444][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1708.955637][T30845] __do_fast_syscall_32+0x129/0x180 [ 1708.961279][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1708.966804][T30845] do_SYSENTER_32+0x73/0x90 [ 1708.972885][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1708.979312][T30845] [ 1708.982054][T30845] Uninit was stored to memory at: [ 1708.987461][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1708.993409][T30845] __msan_chain_origin+0x57/0xa0 [ 1708.998795][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1709.004087][T30845] get_compat_msghdr+0x108/0x2b0 [ 1709.010033][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1709.016507][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1709.021780][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1709.029810][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1709.036168][T30845] __do_fast_syscall_32+0x129/0x180 [ 1709.050179][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1709.055787][T30845] do_SYSENTER_32+0x73/0x90 [ 1709.060698][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1709.068932][T30845] [ 1709.071608][T30845] Uninit was stored to memory at: [ 1709.078552][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1709.084470][T30845] __msan_chain_origin+0x57/0xa0 [ 1709.090849][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1709.096164][T30845] get_compat_msghdr+0x108/0x2b0 [ 1709.102505][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1709.107394][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1709.112390][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1709.118973][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1709.125374][T30845] __do_fast_syscall_32+0x129/0x180 [ 1709.132618][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1709.137500][T30845] do_SYSENTER_32+0x73/0x90 [ 1709.142298][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1709.149844][T30845] [ 1709.152338][T30845] Uninit was stored to memory at: [ 1709.157912][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1709.164463][T30845] __msan_chain_origin+0x57/0xa0 [ 1709.169904][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1709.175304][T30845] get_compat_msghdr+0x108/0x2b0 [ 1709.180585][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1709.185965][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1709.191671][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1709.198113][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1709.205269][T30845] __do_fast_syscall_32+0x129/0x180 [ 1709.210798][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1709.215951][T30845] do_SYSENTER_32+0x73/0x90 [ 1709.220673][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1709.227972][T30845] [ 1709.230486][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1709.237470][T30845] do_recvmmsg+0xc2/0x22e0 [ 1709.243937][T30845] do_recvmmsg+0xc2/0x22e0 [ 1709.565111][T30845] not chained 90000 origins [ 1709.571083][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1709.581192][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.592963][T30845] Call Trace: [ 1709.596646][T30845] dump_stack+0x21c/0x280 [ 1709.602075][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1709.608847][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1709.614868][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1709.620961][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1709.627130][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1709.637966][T30845] ? _copy_from_user+0x201/0x310 [ 1709.643634][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1709.649851][T30845] __msan_chain_origin+0x57/0xa0 [ 1709.654977][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1709.660212][T30845] get_compat_msghdr+0x108/0x2b0 [ 1709.665519][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1709.670151][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1709.675726][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1709.681898][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1709.687566][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1709.692457][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1709.697424][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1709.703811][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1709.709303][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1709.716045][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1709.724616][T30845] __do_fast_syscall_32+0x129/0x180 [ 1709.731374][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1709.737486][T30845] do_SYSENTER_32+0x73/0x90 [ 1709.742598][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1709.750265][T30845] RIP: 0023:0xf7f28549 [ 1709.755156][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1709.780024][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1709.790360][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1709.798747][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1709.806805][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1709.815342][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1709.824405][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.835595][T30845] Uninit was stored to memory at: [ 1709.840919][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1709.847286][T30845] __msan_chain_origin+0x57/0xa0 [ 1709.852542][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1709.857847][T30845] get_compat_msghdr+0x108/0x2b0 [ 1709.863528][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1709.868385][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1709.873335][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1709.881987][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1709.889299][T30845] __do_fast_syscall_32+0x129/0x180 [ 1709.896843][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1709.902298][T30845] do_SYSENTER_32+0x73/0x90 [ 1709.907148][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1709.914597][T30845] [ 1709.917179][T30845] Uninit was stored to memory at: [ 1709.922401][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1709.928970][T30845] __msan_chain_origin+0x57/0xa0 [ 1709.934285][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1709.941019][T30845] get_compat_msghdr+0x108/0x2b0 [ 1709.947335][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1709.952667][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1709.957919][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1709.964675][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1709.972576][T30845] __do_fast_syscall_32+0x129/0x180 [ 1709.979008][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1709.986080][T30845] do_SYSENTER_32+0x73/0x90 [ 1709.991194][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1709.999158][T30845] [ 1710.001868][T30845] Uninit was stored to memory at: [ 1710.007533][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1710.013404][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.018720][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1710.025586][T30845] get_compat_msghdr+0x108/0x2b0 [ 1710.032326][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1710.038302][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1710.043331][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1710.050475][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1710.058931][T30845] __do_fast_syscall_32+0x129/0x180 [ 1710.065008][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1710.070801][T30845] do_SYSENTER_32+0x73/0x90 [ 1710.075879][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1710.085240][T30845] [ 1710.088104][T30845] Uninit was stored to memory at: [ 1710.093571][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1710.100176][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.105555][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1710.111877][T30845] get_compat_msghdr+0x108/0x2b0 [ 1710.117232][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1710.122303][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1710.127545][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1710.136178][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1710.142876][T30845] __do_fast_syscall_32+0x129/0x180 [ 1710.148470][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1710.153721][T30845] do_SYSENTER_32+0x73/0x90 [ 1710.158335][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1710.165361][T30845] [ 1710.167718][T30845] Uninit was stored to memory at: [ 1710.173300][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1710.179395][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.184427][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1710.190517][T30845] get_compat_msghdr+0x108/0x2b0 [ 1710.196116][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1710.201240][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1710.206270][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1710.215216][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1710.223542][T30845] __do_fast_syscall_32+0x129/0x180 [ 1710.229305][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1710.234466][T30845] do_SYSENTER_32+0x73/0x90 [ 1710.239146][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1710.245691][T30845] [ 1710.249145][T30845] Uninit was stored to memory at: [ 1710.257533][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1710.267483][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.273601][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1710.279139][T30845] get_compat_msghdr+0x108/0x2b0 [ 1710.284337][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1710.289524][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1710.295084][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1710.302078][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1710.308572][T30845] __do_fast_syscall_32+0x129/0x180 [ 1710.314017][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1710.318967][T30845] do_SYSENTER_32+0x73/0x90 [ 1710.324466][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1710.331413][T30845] [ 1710.333904][T30845] Uninit was stored to memory at: [ 1710.338938][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1710.344795][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.350027][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1710.355225][T30845] get_compat_msghdr+0x108/0x2b0 [ 1710.360310][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1710.365289][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1710.370746][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1710.377236][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1710.383535][T30845] __do_fast_syscall_32+0x129/0x180 [ 1710.389035][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1710.394515][T30845] do_SYSENTER_32+0x73/0x90 [ 1710.400250][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1710.406762][T30845] [ 1710.409563][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1710.417057][T30845] do_recvmmsg+0xc2/0x22e0 [ 1710.423304][T30845] do_recvmmsg+0xc2/0x22e0 [ 1710.633865][T30845] not chained 100000 origins [ 1710.639682][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1710.649186][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.660081][T30845] Call Trace: [ 1710.663722][T30845] dump_stack+0x21c/0x280 [ 1710.668096][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1710.673940][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1710.680145][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1710.685735][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1710.691847][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1710.698197][T30845] ? _copy_from_user+0x201/0x310 [ 1710.703495][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1710.708744][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.714571][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1710.720007][T30845] get_compat_msghdr+0x108/0x2b0 [ 1710.726940][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1710.732020][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1710.737792][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1710.744170][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1710.749579][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1710.754374][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1710.759161][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1710.765366][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1710.771202][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1710.778155][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1710.784776][T30845] __do_fast_syscall_32+0x129/0x180 [ 1710.790524][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1710.795663][T30845] do_SYSENTER_32+0x73/0x90 [ 1710.800801][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1710.807551][T30845] RIP: 0023:0xf7f28549 [ 1710.811818][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1710.834859][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1710.843946][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1710.852579][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1710.860743][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1710.870280][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1710.878451][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1710.888544][T30845] Uninit was stored to memory at: [ 1710.894112][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1710.900671][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.906696][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1710.912764][T30845] get_compat_msghdr+0x108/0x2b0 [ 1710.919145][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1710.924628][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1710.930138][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1710.936798][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1710.943733][T30845] __do_fast_syscall_32+0x129/0x180 [ 1710.951117][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1710.956489][T30845] do_SYSENTER_32+0x73/0x90 [ 1710.962164][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1710.969367][T30845] [ 1710.971820][T30845] Uninit was stored to memory at: [ 1710.978563][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1710.986338][T30845] __msan_chain_origin+0x57/0xa0 [ 1710.991760][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.000297][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.006405][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.011847][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.018019][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.024722][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1711.031456][T30845] __do_fast_syscall_32+0x129/0x180 [ 1711.037708][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1711.042911][T30845] do_SYSENTER_32+0x73/0x90 [ 1711.048132][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1711.055171][T30845] [ 1711.057812][T30845] Uninit was stored to memory at: [ 1711.063125][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1711.069215][T30845] __msan_chain_origin+0x57/0xa0 [ 1711.074607][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.081884][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.087870][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.093519][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.102854][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.109741][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1711.116771][T30845] __do_fast_syscall_32+0x129/0x180 [ 1711.124405][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1711.130089][T30845] do_SYSENTER_32+0x73/0x90 [ 1711.138270][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1711.148205][T30845] [ 1711.151544][T30845] Uninit was stored to memory at: [ 1711.157863][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1711.164662][T30845] __msan_chain_origin+0x57/0xa0 [ 1711.170215][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.175750][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.181918][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.186444][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.191607][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.198329][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1711.205297][T30845] __do_fast_syscall_32+0x129/0x180 [ 1711.211216][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1711.216534][T30845] do_SYSENTER_32+0x73/0x90 [ 1711.221286][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1711.228096][T30845] [ 1711.230415][T30845] Uninit was stored to memory at: [ 1711.236040][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1711.242159][T30845] __msan_chain_origin+0x57/0xa0 [ 1711.247180][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.252975][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.258409][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.263152][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.268030][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.275412][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1711.282715][T30845] __do_fast_syscall_32+0x129/0x180 [ 1711.292189][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1711.298631][T30845] do_SYSENTER_32+0x73/0x90 [ 1711.303614][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1711.310300][T30845] [ 1711.312981][T30845] Uninit was stored to memory at: [ 1711.318524][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1711.324642][T30845] __msan_chain_origin+0x57/0xa0 [ 1711.329580][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.334864][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.340213][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.345081][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.350416][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.358078][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1711.364756][T30845] __do_fast_syscall_32+0x129/0x180 [ 1711.370669][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1711.376959][T30845] do_SYSENTER_32+0x73/0x90 [ 1711.383395][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1711.390682][T30845] [ 1711.393072][T30845] Uninit was stored to memory at: [ 1711.399379][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1711.406849][T30845] __msan_chain_origin+0x57/0xa0 [ 1711.413225][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.421038][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.428501][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.434091][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.439337][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.449947][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1711.457204][T30845] __do_fast_syscall_32+0x129/0x180 [ 1711.464673][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1711.470685][T30845] do_SYSENTER_32+0x73/0x90 [ 1711.477403][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1711.485301][T30845] [ 1711.488480][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1711.499362][T30845] do_recvmmsg+0xc2/0x22e0 [ 1711.504862][T30845] do_recvmmsg+0xc2/0x22e0 [ 1711.714525][T30845] not chained 110000 origins [ 1711.719379][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1711.728063][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.738419][T30845] Call Trace: [ 1711.741738][T30845] dump_stack+0x21c/0x280 [ 1711.746249][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1711.752921][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1711.759022][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1711.765746][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1711.772010][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1711.778105][T30845] ? _copy_from_user+0x201/0x310 [ 1711.783766][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1711.790455][T30845] __msan_chain_origin+0x57/0xa0 [ 1711.795399][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.800693][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.805645][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.810375][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1711.815948][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1711.822022][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1711.827309][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1711.832083][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.836776][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1711.842586][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1711.848220][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.854299][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1711.860464][T30845] __do_fast_syscall_32+0x129/0x180 [ 1711.865669][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1711.870528][T30845] do_SYSENTER_32+0x73/0x90 [ 1711.875044][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1711.881372][T30845] RIP: 0023:0xf7f28549 [ 1711.885433][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1711.905060][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1711.913452][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1711.921400][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1711.929354][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1711.937415][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1711.945378][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1711.953416][T30845] Uninit was stored to memory at: [ 1711.959056][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1711.964752][T30845] __msan_chain_origin+0x57/0xa0 [ 1711.969681][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1711.974766][T30845] get_compat_msghdr+0x108/0x2b0 [ 1711.980650][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1711.985130][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1711.989781][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1711.995831][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.002048][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.007233][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.012079][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.016565][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.022876][T30845] [ 1712.025179][T30845] Uninit was stored to memory at: [ 1712.030197][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1712.035902][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.040821][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.046031][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.050962][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.055458][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.060122][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.066257][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.072394][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.077578][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.082598][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.087195][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.093587][T30845] [ 1712.095895][T30845] Uninit was stored to memory at: [ 1712.100905][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1712.106810][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.111828][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.116948][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.122577][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.127160][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.131853][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.137921][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.144060][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.149540][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.155390][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.159906][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.166215][T30845] [ 1712.168552][T30845] Uninit was stored to memory at: [ 1712.173587][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1712.179379][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.184316][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.189426][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.194446][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.198955][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.203628][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.209680][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.216269][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.221555][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.226400][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.230884][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.237512][T30845] [ 1712.240280][T30845] Uninit was stored to memory at: [ 1712.245331][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1712.251233][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.256281][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.261405][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.266336][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.270973][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.275641][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.281692][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.287838][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.293981][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.298931][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.303433][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.309729][T30845] [ 1712.312037][T30845] Uninit was stored to memory at: [ 1712.317162][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1712.323507][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.328663][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.333855][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.338961][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.343577][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.348260][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.354394][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.360549][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.365744][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.370865][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.375410][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.381712][T30845] [ 1712.384046][T30845] Uninit was stored to memory at: [ 1712.389073][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1712.395034][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.399995][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.405187][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.410820][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.416157][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.421670][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.428046][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.434470][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.440166][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.445124][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.449615][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.456001][T30845] [ 1712.458322][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1712.464975][T30845] do_recvmmsg+0xc2/0x22e0 [ 1712.469386][T30845] do_recvmmsg+0xc2/0x22e0 [ 1712.697804][T30845] not chained 120000 origins [ 1712.702454][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1712.711763][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.722026][T30845] Call Trace: [ 1712.725886][T30845] dump_stack+0x21c/0x280 [ 1712.730503][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1712.737375][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1712.743289][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1712.748763][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1712.754419][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1712.761109][T30845] ? _copy_from_user+0x201/0x310 [ 1712.766056][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1712.771375][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.776319][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.783450][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.788398][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.792919][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1712.798403][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1712.804043][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1712.809333][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1712.814099][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.818789][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1712.824613][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1712.829859][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.836217][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.842362][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.847548][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.852428][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.857111][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1712.863422][T30845] RIP: 0023:0xf7f28549 [ 1712.867481][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1712.887075][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1712.896363][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1712.904342][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1712.912509][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1712.920466][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1712.928527][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1712.936715][T30845] Uninit was stored to memory at: [ 1712.941741][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1712.947458][T30845] __msan_chain_origin+0x57/0xa0 [ 1712.952387][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1712.957601][T30845] get_compat_msghdr+0x108/0x2b0 [ 1712.962535][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1712.967029][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1712.971791][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1712.977857][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1712.984120][T30845] __do_fast_syscall_32+0x129/0x180 [ 1712.989585][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1712.994418][T30845] do_SYSENTER_32+0x73/0x90 [ 1712.999423][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.005726][T30845] [ 1713.008049][T30845] Uninit was stored to memory at: [ 1713.013182][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.019071][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.024014][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.029194][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.034150][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.038644][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.043396][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.050498][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.057402][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.062698][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.067890][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.072374][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.080151][T30845] [ 1713.082490][T30845] Uninit was stored to memory at: [ 1713.087715][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.093606][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.098799][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.104280][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.109474][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.114044][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.118710][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.125016][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.131177][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.136370][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.141202][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.145726][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.152030][T30845] [ 1713.154333][T30845] Uninit was stored to memory at: [ 1713.159357][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.165088][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.170017][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.175301][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.180238][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.184718][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.189472][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.195522][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.201654][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.206841][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.211696][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.216359][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.223271][T30845] [ 1713.225583][T30845] Uninit was stored to memory at: [ 1713.230936][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.236644][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.241717][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.246810][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.251849][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.256865][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.261536][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.267596][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.273728][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.278912][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.283754][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.288235][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.294537][T30845] [ 1713.296849][T30845] Uninit was stored to memory at: [ 1713.301942][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.307684][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.312596][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.317681][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.322595][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.327076][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.332088][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.338132][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.344260][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.349454][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.354278][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.358758][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.365079][T30845] [ 1713.367384][T30845] Uninit was stored to memory at: [ 1713.372406][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.378105][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.383035][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.388124][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.393062][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.397557][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.402664][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.408715][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.414865][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.420051][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.424889][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.429371][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.435665][T30845] [ 1713.438023][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1713.444697][T30845] do_recvmmsg+0xc2/0x22e0 [ 1713.449352][T30845] do_recvmmsg+0xc2/0x22e0 [ 1713.654208][T30845] not chained 130000 origins [ 1713.659018][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1713.667686][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.677988][T30845] Call Trace: [ 1713.681289][T30845] dump_stack+0x21c/0x280 [ 1713.685735][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1713.691470][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1713.696848][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1713.702241][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1713.707884][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1713.713956][T30845] ? _copy_from_user+0x201/0x310 [ 1713.718909][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1713.724115][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.729063][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.734181][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.739126][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.743741][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1713.748955][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1713.754681][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1713.760840][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1713.765608][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.770289][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1713.776139][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1713.781344][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.787420][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.793599][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.798803][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.803664][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.808177][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.814592][T30845] RIP: 0023:0xf7f28549 [ 1713.818676][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1713.838627][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1713.847021][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1713.854995][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1713.863041][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1713.870990][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1713.878955][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1713.886966][T30845] Uninit was stored to memory at: [ 1713.892006][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.897709][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.902639][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.907748][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.912665][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.917148][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.921803][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.927874][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1713.934047][T30845] __do_fast_syscall_32+0x129/0x180 [ 1713.939333][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1713.944262][T30845] do_SYSENTER_32+0x73/0x90 [ 1713.948818][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1713.955135][T30845] [ 1713.957446][T30845] Uninit was stored to memory at: [ 1713.962459][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1713.968505][T30845] __msan_chain_origin+0x57/0xa0 [ 1713.973428][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1713.978543][T30845] get_compat_msghdr+0x108/0x2b0 [ 1713.983507][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1713.988020][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1713.992688][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1713.999548][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.005718][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.010903][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.015902][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.021773][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.028204][T30845] [ 1714.030515][T30845] Uninit was stored to memory at: [ 1714.035720][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.041516][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.046451][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.051575][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.058323][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.063099][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.068043][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.074087][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.080384][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.085750][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.090600][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.095087][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.101385][T30845] [ 1714.103774][T30845] Uninit was stored to memory at: [ 1714.108785][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.114488][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.119420][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.125134][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.130056][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.134559][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.139274][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.145331][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.151488][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.156688][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.161614][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.166101][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.172556][T30845] [ 1714.174879][T30845] Uninit was stored to memory at: [ 1714.179897][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.185673][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.190708][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.195823][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.200765][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.205268][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.210246][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.216297][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.222448][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.227631][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.232482][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.236977][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.243270][T30845] [ 1714.245570][T30845] Uninit was stored to memory at: [ 1714.250578][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.256278][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.261332][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.266442][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.271362][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.275845][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.280504][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.286574][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.292710][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.297918][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.302776][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.307261][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.313559][T30845] [ 1714.315859][T30845] Uninit was stored to memory at: [ 1714.320885][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.326579][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.331492][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.336577][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.341504][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.345997][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.350653][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.356698][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.362858][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.368069][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.372924][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.377424][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.383719][T30845] [ 1714.386021][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1714.392688][T30845] do_recvmmsg+0xc2/0x22e0 [ 1714.397087][T30845] do_recvmmsg+0xc2/0x22e0 [ 1714.596701][T30845] not chained 140000 origins [ 1714.601371][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1714.610038][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.620091][T30845] Call Trace: [ 1714.623487][T30845] dump_stack+0x21c/0x280 [ 1714.627832][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1714.633565][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1714.638985][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1714.644298][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1714.649938][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1714.656097][T30845] ? _copy_from_user+0x201/0x310 [ 1714.661041][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1714.666339][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.671281][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.676407][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.681448][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.685981][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1714.691198][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1714.696874][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1714.702172][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1714.707002][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.711694][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1714.717499][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1714.722707][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.728787][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.735039][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.740259][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.745118][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.749673][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.755998][T30845] RIP: 0023:0xf7f28549 [ 1714.760071][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1714.782237][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1714.790632][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1714.798766][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1714.806850][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1714.814836][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.822889][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.832431][T30845] Uninit was stored to memory at: [ 1714.837466][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.843196][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.848221][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.853320][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.858265][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.862762][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.867416][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.873545][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.879675][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.884849][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.889691][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.894260][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.900570][T30845] [ 1714.902970][T30845] Uninit was stored to memory at: [ 1714.907991][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.913773][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.918710][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.923803][T30845] get_compat_msghdr+0x108/0x2b0 [ 1714.931777][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1714.936274][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1714.940948][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1714.947009][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1714.953142][T30845] __do_fast_syscall_32+0x129/0x180 [ 1714.958332][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1714.963160][T30845] do_SYSENTER_32+0x73/0x90 [ 1714.967640][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1714.973934][T30845] [ 1714.976236][T30845] Uninit was stored to memory at: [ 1714.981242][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1714.987043][T30845] __msan_chain_origin+0x57/0xa0 [ 1714.992151][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1714.997244][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.002173][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.006694][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.011354][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.017410][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.023566][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.028768][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.033616][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.038123][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.044419][T30845] [ 1715.046720][T30845] Uninit was stored to memory at: [ 1715.051739][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1715.057464][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.062390][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.067485][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.072404][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.076887][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.081546][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.087604][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.093755][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.099018][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.103869][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.108369][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.114730][T30845] [ 1715.117113][T30845] Uninit was stored to memory at: [ 1715.122140][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1715.127854][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.132769][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.138205][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.144670][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.149156][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.153828][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.160570][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.166701][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.172159][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.176994][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.182566][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.188968][T30845] [ 1715.191368][T30845] Uninit was stored to memory at: [ 1715.196401][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1715.202126][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.208710][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.213936][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.219511][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.224178][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.228877][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.235221][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.242226][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.247508][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.252429][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.257002][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.263498][T30845] [ 1715.265831][T30845] Uninit was stored to memory at: [ 1715.270884][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1715.276687][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.281712][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.288330][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.293257][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.297769][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.302463][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.308555][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.314819][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.319998][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.324838][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.330889][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.337566][T30845] [ 1715.339907][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1715.346677][T30845] do_recvmmsg+0xc2/0x22e0 [ 1715.351250][T30845] do_recvmmsg+0xc2/0x22e0 [ 1715.565250][T30845] not chained 150000 origins [ 1715.570158][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1715.579021][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1715.589601][T30845] Call Trace: [ 1715.592906][T30845] dump_stack+0x21c/0x280 [ 1715.597360][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1715.603093][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1715.608888][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1715.614097][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1715.619752][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1715.626655][T30845] ? _copy_from_user+0x201/0x310 [ 1715.631608][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1715.636844][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.641793][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.647075][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.652547][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.657068][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1715.662286][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1715.668284][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1715.673583][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1715.678534][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.683224][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1715.689582][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1715.695309][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.701540][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.707794][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.713101][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.717960][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.722511][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.728842][T30845] RIP: 0023:0xf7f28549 [ 1715.732903][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1715.752749][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1715.761901][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1715.769857][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1715.778001][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1715.789646][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1715.799082][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.807072][T30845] Uninit was stored to memory at: [ 1715.814518][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1715.820369][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.825344][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.830571][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.835508][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.841613][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.846277][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.852820][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.858983][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.865648][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.870751][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.875247][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.882081][T30845] [ 1715.884526][T30845] Uninit was stored to memory at: [ 1715.890364][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1715.896089][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.901526][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.907792][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.913498][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.918027][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.922709][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1715.929774][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1715.936560][T30845] __do_fast_syscall_32+0x129/0x180 [ 1715.941930][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1715.946775][T30845] do_SYSENTER_32+0x73/0x90 [ 1715.951542][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1715.957866][T30845] [ 1715.960180][T30845] Uninit was stored to memory at: [ 1715.965234][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1715.970961][T30845] __msan_chain_origin+0x57/0xa0 [ 1715.976002][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1715.981723][T30845] get_compat_msghdr+0x108/0x2b0 [ 1715.986752][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1715.991508][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1715.996285][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.003105][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.011279][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.016646][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.021506][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.026008][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.033026][T30845] [ 1716.035353][T30845] Uninit was stored to memory at: [ 1716.040380][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1716.046282][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.052546][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.057945][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.063378][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.067860][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.072522][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.078812][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.088359][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.093669][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.099083][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.106935][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.113715][T30845] [ 1716.117200][T30845] Uninit was stored to memory at: [ 1716.122229][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1716.128064][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.133794][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.138908][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.143832][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.148337][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.153010][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.159060][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.165191][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.170405][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.175230][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.179719][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.186024][T30845] [ 1716.188497][T30845] Uninit was stored to memory at: [ 1716.193530][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1716.199257][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.204175][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.209276][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.214200][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.218700][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.223359][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.229430][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.235584][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.240762][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.245585][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.250068][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.256360][T30845] [ 1716.258675][T30845] Uninit was stored to memory at: [ 1716.263690][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1716.269387][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.274416][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.279612][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.284546][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.289036][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.293702][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.299774][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.305933][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.311124][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.315950][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.320445][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.326747][T30845] [ 1716.329070][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1716.335737][T30845] do_recvmmsg+0xc2/0x22e0 [ 1716.340141][T30845] do_recvmmsg+0xc2/0x22e0 [ 1716.545740][T30845] not chained 160000 origins [ 1716.550374][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1716.559039][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.569095][T30845] Call Trace: [ 1716.572394][T30845] dump_stack+0x21c/0x280 [ 1716.576733][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1716.582461][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1716.587840][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1716.593045][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1716.598683][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1716.604769][T30845] ? _copy_from_user+0x201/0x310 [ 1716.609727][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1716.614931][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.619873][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.624990][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.629945][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.634539][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1716.639952][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1716.645618][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1716.650912][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1716.655681][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.660405][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1716.666225][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1716.671435][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.677512][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.683675][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.688906][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.693771][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.698364][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.704702][T30845] RIP: 0023:0xf7f28549 [ 1716.708769][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1716.728355][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1716.736928][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1716.745234][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.753209][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1716.761177][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1716.769138][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1716.777199][T30845] Uninit was stored to memory at: [ 1716.782436][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1716.788483][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.793588][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.798879][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.803800][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.808293][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.813047][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.819089][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.825308][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.830975][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.835804][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.840989][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.847296][T30845] [ 1716.849602][T30845] Uninit was stored to memory at: [ 1716.854609][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1716.860305][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.865306][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.870411][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.875345][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.880134][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.884814][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.890874][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.897105][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.902284][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.907127][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.911892][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.918220][T30845] [ 1716.920531][T30845] Uninit was stored to memory at: [ 1716.925559][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1716.931506][T30845] __msan_chain_origin+0x57/0xa0 [ 1716.936472][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1716.941748][T30845] get_compat_msghdr+0x108/0x2b0 [ 1716.946697][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1716.951306][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1716.955980][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1716.962038][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1716.968329][T30845] __do_fast_syscall_32+0x129/0x180 [ 1716.973560][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1716.978560][T30845] do_SYSENTER_32+0x73/0x90 [ 1716.983173][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1716.989661][T30845] [ 1716.992921][T30845] Uninit was stored to memory at: [ 1716.998134][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1717.004164][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.009190][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.014283][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.019336][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.023827][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.028589][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.034663][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1717.040816][T30845] __do_fast_syscall_32+0x129/0x180 [ 1717.046279][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1717.051230][T30845] do_SYSENTER_32+0x73/0x90 [ 1717.055872][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1717.062543][T30845] [ 1717.064854][T30845] Uninit was stored to memory at: [ 1717.069870][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1717.076296][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.081852][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.086951][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.092045][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.096639][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.101809][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.107979][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1717.114117][T30845] __do_fast_syscall_32+0x129/0x180 [ 1717.119556][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1717.125904][T30845] do_SYSENTER_32+0x73/0x90 [ 1717.130497][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1717.136819][T30845] [ 1717.139135][T30845] Uninit was stored to memory at: [ 1717.144257][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1717.150235][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.155165][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.160282][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.165309][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.169906][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.174667][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.180727][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1717.187697][T30845] __do_fast_syscall_32+0x129/0x180 [ 1717.194565][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1717.200101][T30845] do_SYSENTER_32+0x73/0x90 [ 1717.204608][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1717.211303][T30845] [ 1717.213909][T30845] Uninit was stored to memory at: [ 1717.219648][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1717.225632][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.230553][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.236873][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.241811][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.246410][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.251099][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.257173][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1717.263315][T30845] __do_fast_syscall_32+0x129/0x180 [ 1717.268626][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1717.273484][T30845] do_SYSENTER_32+0x73/0x90 [ 1717.278073][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1717.284386][T30845] [ 1717.286691][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1717.293431][T30845] do_recvmmsg+0xc2/0x22e0 [ 1717.297835][T30845] do_recvmmsg+0xc2/0x22e0 [ 1717.580677][T30845] not chained 170000 origins [ 1717.585331][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1717.594001][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.604054][T30845] Call Trace: [ 1717.607353][T30845] dump_stack+0x21c/0x280 [ 1717.611699][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1717.617426][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1717.622808][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1717.628015][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1717.633658][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1717.639845][T30845] ? _copy_from_user+0x201/0x310 [ 1717.644764][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1717.650178][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.655131][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.660229][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.665191][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.669709][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1717.674893][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1717.680604][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1717.685882][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1717.690626][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.695296][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1717.701098][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1717.706294][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.712353][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1717.718506][T30845] __do_fast_syscall_32+0x129/0x180 [ 1717.723694][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1717.728555][T30845] do_SYSENTER_32+0x73/0x90 [ 1717.733448][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1717.739839][T30845] RIP: 0023:0xf7f28549 [ 1717.744006][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1717.763787][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1717.772212][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1717.780362][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.788430][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1717.796511][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1717.804474][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1717.813590][T30845] Uninit was stored to memory at: [ 1717.818626][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1717.824334][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.829264][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.834619][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.839556][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.844086][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.848752][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.854812][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1717.860962][T30845] __do_fast_syscall_32+0x129/0x180 [ 1717.866144][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1717.871001][T30845] do_SYSENTER_32+0x73/0x90 [ 1717.875505][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1717.881813][T30845] [ 1717.884136][T30845] Uninit was stored to memory at: [ 1717.889155][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1717.894863][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.899790][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.904875][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.909789][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.914266][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.918921][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.924975][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1717.931120][T30845] __do_fast_syscall_32+0x129/0x180 [ 1717.936294][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1717.941135][T30845] do_SYSENTER_32+0x73/0x90 [ 1717.945616][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1717.951911][T30845] [ 1717.954211][T30845] Uninit was stored to memory at: [ 1717.959228][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1717.964921][T30845] __msan_chain_origin+0x57/0xa0 [ 1717.969844][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1717.974946][T30845] get_compat_msghdr+0x108/0x2b0 [ 1717.979869][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1717.984357][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1717.989027][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1717.995200][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.001346][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.006523][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.011352][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.015842][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.022136][T30845] [ 1718.024460][T30845] Uninit was stored to memory at: [ 1718.029480][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1718.035192][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.040130][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.045227][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.050297][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.054982][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.059667][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.065811][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.071949][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.077147][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.081978][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.086475][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.092896][T30845] [ 1718.095233][T30845] Uninit was stored to memory at: [ 1718.100272][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1718.105989][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.110943][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.116158][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.121410][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.125898][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.130580][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.137089][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.143235][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.148703][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.153641][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.158130][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.164594][T30845] [ 1718.167346][T30845] Uninit was stored to memory at: [ 1718.172654][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1718.178861][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.183952][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.189144][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.195212][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.199716][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.204865][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.210931][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.217228][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.222430][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.227269][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.232031][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.238530][T30845] [ 1718.241190][T30845] Uninit was stored to memory at: [ 1718.246204][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1718.251925][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.256841][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.261947][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.266963][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.271455][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.276211][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.282352][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.288765][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.293972][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.298855][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.303483][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.309783][T30845] [ 1718.312086][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1718.318769][T30845] do_recvmmsg+0xc2/0x22e0 [ 1718.323187][T30845] do_recvmmsg+0xc2/0x22e0 [ 1718.552435][T30845] not chained 180000 origins [ 1718.557090][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1718.565790][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.575844][T30845] Call Trace: [ 1718.579172][T30845] dump_stack+0x21c/0x280 [ 1718.583516][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1718.589247][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1718.594627][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1718.599835][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1718.605700][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1718.611789][T30845] ? _copy_from_user+0x201/0x310 [ 1718.616736][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1718.621949][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.626896][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.632021][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.637087][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.641604][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1718.646873][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1718.652520][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1718.657818][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1718.662594][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.667485][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1718.673301][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1718.678523][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.684633][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.691062][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.696316][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.701179][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.705698][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.712026][T30845] RIP: 0023:0xf7f28549 [ 1718.716089][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1718.735746][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1718.744331][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1718.753064][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1718.761132][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1718.769135][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1718.777205][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.785259][T30845] Uninit was stored to memory at: [ 1718.790406][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1718.796870][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.801824][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.806931][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.811873][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.816357][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.821103][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.827509][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.833925][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.839543][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.844392][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.848911][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.855216][T30845] [ 1718.857530][T30845] Uninit was stored to memory at: [ 1718.862553][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1718.868251][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.873175][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.878263][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.883180][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.887662][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.892471][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.898569][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.904709][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.909895][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.914737][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.919480][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.926084][T30845] [ 1718.928415][T30845] Uninit was stored to memory at: [ 1718.933431][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1718.939133][T30845] __msan_chain_origin+0x57/0xa0 [ 1718.944049][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1718.949148][T30845] get_compat_msghdr+0x108/0x2b0 [ 1718.954078][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1718.958622][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1718.963290][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1718.969337][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1718.975560][T30845] __do_fast_syscall_32+0x129/0x180 [ 1718.980752][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1718.985593][T30845] do_SYSENTER_32+0x73/0x90 [ 1718.990338][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1718.996685][T30845] [ 1718.999008][T30845] Uninit was stored to memory at: [ 1719.004022][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1719.009897][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.014829][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.019916][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.024840][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1719.029321][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1719.033977][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1719.040021][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1719.046324][T30845] __do_fast_syscall_32+0x129/0x180 [ 1719.051501][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1719.056394][T30845] do_SYSENTER_32+0x73/0x90 [ 1719.060906][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.067218][T30845] [ 1719.069547][T30845] Uninit was stored to memory at: [ 1719.074686][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1719.080412][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.085415][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.090508][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.095445][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1719.099954][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1719.104641][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1719.111222][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1719.117367][T30845] __do_fast_syscall_32+0x129/0x180 [ 1719.122599][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1719.127495][T30845] do_SYSENTER_32+0x73/0x90 [ 1719.131997][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.138471][T30845] [ 1719.140776][T30845] Uninit was stored to memory at: [ 1719.145794][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1719.151587][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.156509][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.161615][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.166532][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1719.171028][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1719.175691][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1719.181751][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1719.188096][T30845] __do_fast_syscall_32+0x129/0x180 [ 1719.193370][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1719.198386][T30845] do_SYSENTER_32+0x73/0x90 [ 1719.202883][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.209396][T30845] [ 1719.212200][T30845] Uninit was stored to memory at: [ 1719.217240][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1719.223160][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.228085][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.233185][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.238231][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1719.242802][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1719.247457][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1719.253503][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1719.259638][T30845] __do_fast_syscall_32+0x129/0x180 [ 1719.265088][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1719.269917][T30845] do_SYSENTER_32+0x73/0x90 [ 1719.274411][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.280724][T30845] [ 1719.283040][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1719.290306][T30845] do_recvmmsg+0xc2/0x22e0 [ 1719.294805][T30845] do_recvmmsg+0xc2/0x22e0 [ 1719.584916][T30845] not chained 190000 origins [ 1719.589571][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1719.598242][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.608297][T30845] Call Trace: [ 1719.611774][T30845] dump_stack+0x21c/0x280 [ 1719.616121][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1719.621853][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1719.627236][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1719.632457][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1719.638105][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1719.644312][T30845] ? _copy_from_user+0x201/0x310 [ 1719.649310][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1719.654673][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.659615][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.665048][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.670075][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1719.674575][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1719.679769][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1719.685392][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1719.690767][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1719.695530][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1719.702340][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1719.709773][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1719.715329][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1719.721992][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1719.728236][T30845] __do_fast_syscall_32+0x129/0x180 [ 1719.733545][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1719.738423][T30845] do_SYSENTER_32+0x73/0x90 [ 1719.742931][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.749259][T30845] RIP: 0023:0xf7f28549 [ 1719.753307][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1719.772901][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1719.781311][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1719.790461][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1719.799617][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1719.807774][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1719.816290][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1719.824273][T30845] Uninit was stored to memory at: [ 1719.829439][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1719.835147][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.840099][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.845294][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.851183][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1719.855771][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1719.860457][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1719.866539][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1719.872730][T30845] __do_fast_syscall_32+0x129/0x180 [ 1719.877915][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1719.882945][T30845] do_SYSENTER_32+0x73/0x90 [ 1719.887433][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.894912][T30845] [ 1719.897317][T30845] Uninit was stored to memory at: [ 1719.902696][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1719.908401][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.913318][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.918506][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.923436][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1719.928008][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1719.932674][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1719.939194][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1719.946375][T30845] __do_fast_syscall_32+0x129/0x180 [ 1719.951663][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1719.956507][T30845] do_SYSENTER_32+0x73/0x90 [ 1719.961001][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.967598][T30845] [ 1719.969999][T30845] Uninit was stored to memory at: [ 1719.975042][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1719.981142][T30845] __msan_chain_origin+0x57/0xa0 [ 1719.986186][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1719.991491][T30845] get_compat_msghdr+0x108/0x2b0 [ 1719.996539][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.001118][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.005889][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.011956][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.018105][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.023442][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.028418][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.034108][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.040504][T30845] [ 1720.043082][T30845] Uninit was stored to memory at: [ 1720.048231][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1720.054576][T30845] __msan_chain_origin+0x57/0xa0 [ 1720.059692][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1720.065131][T30845] get_compat_msghdr+0x108/0x2b0 [ 1720.070051][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.074566][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.079226][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.085297][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.091565][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.097362][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.102293][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.106874][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.113505][T30845] [ 1720.115820][T30845] Uninit was stored to memory at: [ 1720.120958][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1720.126955][T30845] __msan_chain_origin+0x57/0xa0 [ 1720.132162][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1720.138328][T30845] get_compat_msghdr+0x108/0x2b0 [ 1720.143535][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.148930][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.153806][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.160751][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.167138][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.172517][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.177441][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.182121][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.188562][T30845] [ 1720.191062][T30845] Uninit was stored to memory at: [ 1720.196278][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1720.202572][T30845] __msan_chain_origin+0x57/0xa0 [ 1720.207538][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1720.213194][T30845] get_compat_msghdr+0x108/0x2b0 [ 1720.218214][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.222742][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.227614][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.233710][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.239887][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.246170][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.251148][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.255657][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.262257][T30845] [ 1720.264585][T30845] Uninit was stored to memory at: [ 1720.269625][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1720.275677][T30845] __msan_chain_origin+0x57/0xa0 [ 1720.280784][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1720.285912][T30845] get_compat_msghdr+0x108/0x2b0 [ 1720.290860][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.295353][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.300475][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.306538][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.312936][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.318140][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.323925][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.328417][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.334736][T30845] [ 1720.337058][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1720.344498][T30845] do_recvmmsg+0xc2/0x22e0 [ 1720.348929][T30845] do_recvmmsg+0xc2/0x22e0 [ 1720.606191][T30845] not chained 200000 origins [ 1720.611321][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1720.620011][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.630681][T30845] Call Trace: [ 1720.633988][T30845] dump_stack+0x21c/0x280 [ 1720.638334][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1720.645374][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1720.650844][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1720.656054][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1720.661728][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1720.668161][T30845] ? _copy_from_user+0x201/0x310 [ 1720.673136][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1720.678523][T30845] __msan_chain_origin+0x57/0xa0 [ 1720.683474][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1720.688717][T30845] get_compat_msghdr+0x108/0x2b0 [ 1720.693708][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.698233][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1720.703460][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1720.709108][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1720.714494][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1720.719383][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.724420][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1720.730409][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1720.735640][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.742036][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.748389][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.753604][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.758469][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.763429][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.769879][T30845] RIP: 0023:0xf7f28549 [ 1720.774394][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1720.795393][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1720.803817][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1720.811785][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1720.819932][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1720.829643][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.837607][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.845863][T30845] Uninit was stored to memory at: [ 1720.850923][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1720.856859][T30845] __msan_chain_origin+0x57/0xa0 [ 1720.861830][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1720.866924][T30845] get_compat_msghdr+0x108/0x2b0 [ 1720.872484][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.877233][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.882958][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.889189][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.895331][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.900520][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.905375][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.910011][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.916499][T30845] [ 1720.918820][T30845] Uninit was stored to memory at: [ 1720.923847][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1720.929552][T30845] __msan_chain_origin+0x57/0xa0 [ 1720.934481][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1720.939577][T30845] get_compat_msghdr+0x108/0x2b0 [ 1720.944540][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1720.949028][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1720.953778][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1720.959826][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1720.965957][T30845] __do_fast_syscall_32+0x129/0x180 [ 1720.971134][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1720.975971][T30845] do_SYSENTER_32+0x73/0x90 [ 1720.980455][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.986763][T30845] [ 1720.989064][T30845] Uninit was stored to memory at: [ 1720.994157][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1720.999867][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.004780][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.009907][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.014823][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.019304][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.023957][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.030014][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.036148][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.041323][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.046276][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.050792][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.057094][T30845] [ 1721.059400][T30845] Uninit was stored to memory at: [ 1721.064410][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1721.070146][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.075062][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.080158][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.085086][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.089582][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.094244][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.100308][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.106559][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.111923][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.117577][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.122074][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.128987][T30845] [ 1721.131395][T30845] Uninit was stored to memory at: [ 1721.137123][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1721.142845][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.147886][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.153002][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.158253][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.162931][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.168562][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.174733][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.180976][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.186164][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.190996][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.195479][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.201878][T30845] [ 1721.204323][T30845] Uninit was stored to memory at: [ 1721.209354][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1721.215269][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.220634][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.225743][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.230759][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.235344][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.240028][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.246260][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.252955][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.258144][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.263918][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.268410][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.274812][T30845] [ 1721.277126][T30845] Uninit was stored to memory at: [ 1721.282201][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1721.287906][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.292833][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.298111][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.303037][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.307539][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.312242][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.318469][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.324615][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.329792][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.334618][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.339104][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.345414][T30845] [ 1721.347731][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1721.354401][T30845] do_recvmmsg+0xc2/0x22e0 [ 1721.358816][T30845] do_recvmmsg+0xc2/0x22e0 [ 1721.588606][T30845] not chained 210000 origins [ 1721.593758][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1721.602447][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.612520][T30845] Call Trace: [ 1721.615916][T30845] dump_stack+0x21c/0x280 [ 1721.620266][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1721.626083][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1721.633315][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1721.638522][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1721.644249][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1721.650323][T30845] ? _copy_from_user+0x201/0x310 [ 1721.655572][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1721.661255][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.666306][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.671449][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.676424][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.680952][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1721.686345][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1721.691993][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1721.697290][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1721.702064][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.706837][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1721.712651][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1721.717859][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.723929][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.730315][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.735646][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.740498][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.744988][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.751310][T30845] RIP: 0023:0xf7f28549 [ 1721.755361][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1721.775540][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1721.783950][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1721.791918][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1721.800139][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1721.808197][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.816780][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.824756][T30845] Uninit was stored to memory at: [ 1721.829784][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1721.835655][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.840582][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.845677][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.850624][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.855541][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.860217][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.866277][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.872416][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.877798][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.882652][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.887139][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.893525][T30845] [ 1721.895829][T30845] Uninit was stored to memory at: [ 1721.901532][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1721.907229][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.913116][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.918385][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.923624][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1721.928121][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1721.932786][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1721.938932][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1721.945167][T30845] __do_fast_syscall_32+0x129/0x180 [ 1721.951329][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1721.956788][T30845] do_SYSENTER_32+0x73/0x90 [ 1721.961377][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.967681][T30845] [ 1721.970086][T30845] Uninit was stored to memory at: [ 1721.975842][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1721.981810][T30845] __msan_chain_origin+0x57/0xa0 [ 1721.987887][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1721.993187][T30845] get_compat_msghdr+0x108/0x2b0 [ 1721.998120][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.002973][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.007725][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.014230][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.020407][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.026025][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.031031][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.035618][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.042017][T30845] [ 1722.044338][T30845] Uninit was stored to memory at: [ 1722.049370][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1722.055099][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.060578][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.065977][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.071190][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.075697][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.080359][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.086416][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.092756][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.098369][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.103675][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.108355][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.114762][T30845] [ 1722.117100][T30845] Uninit was stored to memory at: [ 1722.123040][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1722.128846][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.133950][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.139614][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.144648][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.149217][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.154308][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.161238][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.168478][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.173866][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.178700][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.183360][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.189656][T30845] [ 1722.191956][T30845] Uninit was stored to memory at: [ 1722.196979][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1722.202814][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.207917][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.213200][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.218532][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.223198][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.227874][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.233959][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.240299][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.245499][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.250705][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.255208][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.261612][T30845] [ 1722.264194][T30845] Uninit was stored to memory at: [ 1722.269738][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1722.275523][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.281502][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.286813][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.291876][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.296469][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.301265][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.307350][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.313744][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.318961][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.324108][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.328600][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.334986][T30845] [ 1722.337311][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1722.344120][T30845] do_recvmmsg+0xc2/0x22e0 [ 1722.348631][T30845] do_recvmmsg+0xc2/0x22e0 [ 1722.558433][T30845] not chained 220000 origins [ 1722.563874][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1722.572706][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.583633][T30845] Call Trace: [ 1722.587026][T30845] dump_stack+0x21c/0x280 [ 1722.591761][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1722.597513][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1722.603335][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1722.608556][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1722.614378][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1722.620459][T30845] ? _copy_from_user+0x201/0x310 [ 1722.625771][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1722.631076][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.636033][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.641222][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.646622][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.651138][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1722.656353][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1722.662080][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1722.667382][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1722.672335][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.677164][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1722.683011][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1722.688397][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.694582][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.700771][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.706074][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.710939][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.715799][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.722308][T30845] RIP: 0023:0xf7f28549 [ 1722.726505][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1722.746393][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1722.754804][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1722.762785][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1722.770826][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1722.779781][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.788279][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.796435][T30845] Uninit was stored to memory at: [ 1722.801808][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1722.807510][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.812808][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.818091][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.824875][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.830424][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.835559][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.841852][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.848023][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.853242][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.858096][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.862604][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.868979][T30845] [ 1722.871438][T30845] Uninit was stored to memory at: [ 1722.876480][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1722.882335][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.887297][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.892595][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.897614][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.902199][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.906964][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.913027][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.919176][T30845] __do_fast_syscall_32+0x129/0x180 [ 1722.924563][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1722.929431][T30845] do_SYSENTER_32+0x73/0x90 [ 1722.934128][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.940857][T30845] [ 1722.943267][T30845] Uninit was stored to memory at: [ 1722.948484][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1722.954510][T30845] __msan_chain_origin+0x57/0xa0 [ 1722.960937][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1722.966048][T30845] get_compat_msghdr+0x108/0x2b0 [ 1722.971086][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1722.976072][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1722.981386][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1722.987862][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1722.995363][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.001139][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.006784][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.011311][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.017836][T30845] [ 1723.020442][T30845] Uninit was stored to memory at: [ 1723.025597][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1723.031345][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.036459][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.041833][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.046782][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.051423][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.056179][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.062416][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.068827][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.074114][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.079254][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.083935][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.090362][T30845] [ 1723.092703][T30845] Uninit was stored to memory at: [ 1723.097849][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1723.103787][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.108919][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.114031][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.119337][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.124051][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.129963][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.136367][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.142555][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.147973][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.153726][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.158236][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.166319][T30845] [ 1723.168640][T30845] Uninit was stored to memory at: [ 1723.174022][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1723.180104][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.187093][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.194365][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.199320][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.205328][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.210198][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.216772][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.223054][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.228363][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.233504][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.238164][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.244898][T30845] [ 1723.247387][T30845] Uninit was stored to memory at: [ 1723.253527][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1723.259321][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.264348][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.270019][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.275692][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.280679][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.286136][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.293374][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.300866][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.306308][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.311137][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.315620][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.322072][T30845] [ 1723.324575][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1723.331444][T30845] do_recvmmsg+0xc2/0x22e0 [ 1723.336248][T30845] do_recvmmsg+0xc2/0x22e0 [ 1723.543774][T30845] not chained 230000 origins [ 1723.548382][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1723.557044][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.567094][T30845] Call Trace: [ 1723.570396][T30845] dump_stack+0x21c/0x280 [ 1723.574914][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1723.580631][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1723.585988][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1723.591192][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1723.596823][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1723.602895][T30845] ? _copy_from_user+0x201/0x310 [ 1723.607928][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1723.613451][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.618375][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.623482][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.628402][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.632904][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1723.638360][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1723.644071][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1723.649362][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1723.654168][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.659172][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1723.664995][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1723.670387][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.676567][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.682725][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.688019][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.693028][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.697516][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.703841][T30845] RIP: 0023:0xf7f28549 [ 1723.707917][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1723.727529][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1723.736459][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1723.744593][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1723.752761][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1723.760812][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.768965][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.776920][T30845] Uninit was stored to memory at: [ 1723.782161][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1723.787967][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.793816][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.799785][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.805122][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.810698][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.815407][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.821888][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.828119][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.833502][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.838818][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.843715][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.851506][T30845] [ 1723.854010][T30845] Uninit was stored to memory at: [ 1723.859033][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1723.865184][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.870224][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.875430][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.880362][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.885027][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.890928][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.897811][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.904290][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.909774][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.914720][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.919519][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.926008][T30845] [ 1723.928793][T30845] Uninit was stored to memory at: [ 1723.933829][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1723.939537][T30845] __msan_chain_origin+0x57/0xa0 [ 1723.944458][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1723.949665][T30845] get_compat_msghdr+0x108/0x2b0 [ 1723.954930][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1723.959674][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1723.964442][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1723.970761][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1723.976926][T30845] __do_fast_syscall_32+0x129/0x180 [ 1723.982749][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1723.987626][T30845] do_SYSENTER_32+0x73/0x90 [ 1723.992319][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.998865][T30845] [ 1724.001555][T30845] Uninit was stored to memory at: [ 1724.006828][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1724.012894][T30845] __msan_chain_origin+0x57/0xa0 [ 1724.017864][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1724.023154][T30845] get_compat_msghdr+0x108/0x2b0 [ 1724.028339][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1724.033061][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1724.037759][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1724.044177][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1724.050683][T30845] __do_fast_syscall_32+0x129/0x180 [ 1724.056319][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1724.063390][T30845] do_SYSENTER_32+0x73/0x90 [ 1724.068159][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1724.074847][T30845] [ 1724.077367][T30845] Uninit was stored to memory at: [ 1724.082647][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1724.089053][T30845] __msan_chain_origin+0x57/0xa0 [ 1724.094250][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1724.099970][T30845] get_compat_msghdr+0x108/0x2b0 [ 1724.105696][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1724.110927][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1724.116664][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1724.124599][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1724.131839][T30845] __do_fast_syscall_32+0x129/0x180 [ 1724.137630][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1724.143119][T30845] do_SYSENTER_32+0x73/0x90 [ 1724.148703][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1724.156592][T30845] [ 1724.158911][T30845] Uninit was stored to memory at: [ 1724.165104][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1724.171522][T30845] __msan_chain_origin+0x57/0xa0 [ 1724.176651][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1724.182082][T30845] get_compat_msghdr+0x108/0x2b0 [ 1724.187126][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1724.193337][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1724.198523][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1724.204673][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1724.211316][T30845] __do_fast_syscall_32+0x129/0x180 [ 1724.216620][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1724.221767][T30845] do_SYSENTER_32+0x73/0x90 [ 1724.226276][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1724.232591][T30845] [ 1724.235173][T30845] Uninit was stored to memory at: [ 1724.240374][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1724.247259][T30845] __msan_chain_origin+0x57/0xa0 [ 1724.252430][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1724.257534][T30845] get_compat_msghdr+0x108/0x2b0 [ 1724.263274][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1724.268017][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1724.273520][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1724.279592][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1724.285862][T30845] __do_fast_syscall_32+0x129/0x180 [ 1724.291574][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1724.296418][T30845] do_SYSENTER_32+0x73/0x90 [ 1724.301205][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1724.308312][T30845] [ 1724.310622][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1724.317378][T30845] do_recvmmsg+0xc2/0x22e0 [ 1724.321992][T30845] do_recvmmsg+0xc2/0x22e0 [ 1724.725775][T30845] not chained 240000 origins [ 1724.730652][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1724.739347][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.749406][T30845] Call Trace: [ 1724.752707][T30845] dump_stack+0x21c/0x280 [ 1724.757799][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1724.763625][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1724.769460][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1724.774690][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1724.780778][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1724.786962][T30845] ? _copy_from_user+0x201/0x310 [ 1724.791998][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1724.797399][T30845] __msan_chain_origin+0x57/0xa0 [ 1724.802808][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1724.807962][T30845] get_compat_msghdr+0x108/0x2b0 [ 1724.813022][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1724.817631][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1724.822953][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1724.828663][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1724.834108][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1724.838971][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1724.843777][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1724.850050][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1724.856378][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1724.863746][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1724.870286][T30845] __do_fast_syscall_32+0x129/0x180 [ 1724.875593][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1724.880456][T30845] do_SYSENTER_32+0x73/0x90 [ 1724.885051][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1724.891837][T30845] RIP: 0023:0xf7f28549 [ 1724.895987][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1724.915771][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1724.924165][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1724.933372][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1724.941458][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1724.949864][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1724.959038][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1724.967806][T30845] Uninit was stored to memory at: [ 1724.973028][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1724.978770][T30845] __msan_chain_origin+0x57/0xa0 [ 1724.985410][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1724.990505][T30845] get_compat_msghdr+0x108/0x2b0 [ 1724.995438][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.000207][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.005161][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.011332][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1725.018211][T30845] __do_fast_syscall_32+0x129/0x180 [ 1725.023416][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1725.028437][T30845] do_SYSENTER_32+0x73/0x90 [ 1725.032931][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.039326][T30845] [ 1725.041659][T30845] Uninit was stored to memory at: [ 1725.046676][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1725.052380][T30845] __msan_chain_origin+0x57/0xa0 [ 1725.057310][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1725.062858][T30845] get_compat_msghdr+0x108/0x2b0 [ 1725.067879][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.073083][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.078622][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.084841][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1725.091338][T30845] __do_fast_syscall_32+0x129/0x180 [ 1725.096516][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1725.101345][T30845] do_SYSENTER_32+0x73/0x90 [ 1725.105828][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.112129][T30845] [ 1725.114657][T30845] Uninit was stored to memory at: [ 1725.120149][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1725.127180][T30845] __msan_chain_origin+0x57/0xa0 [ 1725.132286][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1725.139131][T30845] get_compat_msghdr+0x108/0x2b0 [ 1725.144107][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.148589][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.153260][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.159659][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1725.166146][T30845] __do_fast_syscall_32+0x129/0x180 [ 1725.172636][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1725.177724][T30845] do_SYSENTER_32+0x73/0x90 [ 1725.182310][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.188884][T30845] [ 1725.191198][T30845] Uninit was stored to memory at: [ 1725.196310][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1725.202170][T30845] __msan_chain_origin+0x57/0xa0 [ 1725.207319][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1725.212423][T30845] get_compat_msghdr+0x108/0x2b0 [ 1725.217447][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.221969][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.226653][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.233129][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1725.239322][T30845] __do_fast_syscall_32+0x129/0x180 [ 1725.244652][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1725.249889][T30845] do_SYSENTER_32+0x73/0x90 [ 1725.254598][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.261013][T30845] [ 1725.266002][T30845] Uninit was stored to memory at: [ 1725.273804][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1725.279885][T30845] __msan_chain_origin+0x57/0xa0 [ 1725.285000][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1725.291137][T30845] get_compat_msghdr+0x108/0x2b0 [ 1725.296352][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.301136][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.305887][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.312010][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1725.318154][T30845] __do_fast_syscall_32+0x129/0x180 [ 1725.323428][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1725.328263][T30845] do_SYSENTER_32+0x73/0x90 [ 1725.332754][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.339174][T30845] [ 1725.341615][T30845] Uninit was stored to memory at: [ 1725.347452][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1725.353186][T30845] __msan_chain_origin+0x57/0xa0 [ 1725.358272][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1725.363407][T30845] get_compat_msghdr+0x108/0x2b0 [ 1725.368479][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.372994][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.377665][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.384245][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1725.390664][T30845] __do_fast_syscall_32+0x129/0x180 [ 1725.396727][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1725.401859][T30845] do_SYSENTER_32+0x73/0x90 [ 1725.406904][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.413324][T30845] [ 1725.415652][T30845] Uninit was stored to memory at: [ 1725.420826][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1725.426546][T30845] __msan_chain_origin+0x57/0xa0 [ 1725.433491][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1725.439648][T30845] get_compat_msghdr+0x108/0x2b0 [ 1725.444802][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.449947][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.454648][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.460927][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1725.467083][T30845] __do_fast_syscall_32+0x129/0x180 [ 1725.472546][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1725.477504][T30845] do_SYSENTER_32+0x73/0x90 [ 1725.482159][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.488462][T30845] [ 1725.490772][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1725.497765][T30845] do_recvmmsg+0xc2/0x22e0 [ 1725.502571][T30845] do_recvmmsg+0xc2/0x22e0 [ 1725.860368][T30845] not chained 250000 origins [ 1725.865331][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1725.874563][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.885817][T30845] Call Trace: [ 1725.889370][T30845] dump_stack+0x21c/0x280 [ 1725.893708][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1725.899750][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1725.905124][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1725.911351][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1725.916990][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1725.923615][T30845] ? _copy_from_user+0x201/0x310 [ 1725.928548][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1725.934017][T30845] __msan_chain_origin+0x57/0xa0 [ 1725.938944][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1725.944061][T30845] get_compat_msghdr+0x108/0x2b0 [ 1725.949101][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1725.954244][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1725.959482][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1725.965393][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1725.970695][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1725.975451][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1725.980116][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1725.985995][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1725.991335][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1725.997576][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.003732][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.008912][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.013916][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.018409][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.024724][T30845] RIP: 0023:0xf7f28549 [ 1726.028780][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1726.048456][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1726.056846][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1726.065339][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1726.073297][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1726.081258][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.089208][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.097166][T30845] Uninit was stored to memory at: [ 1726.102179][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1726.107898][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.112865][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.117964][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.122890][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.127366][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.132019][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.138062][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.144212][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.149403][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.154232][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.158720][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.165025][T30845] [ 1726.167328][T30845] Uninit was stored to memory at: [ 1726.172355][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1726.178060][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.182986][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.188071][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.192993][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.197470][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.202124][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.208335][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.214491][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.219672][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.224509][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.228992][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.235375][T30845] [ 1726.237688][T30845] Uninit was stored to memory at: [ 1726.242835][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1726.248554][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.253487][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.258601][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.263522][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.268014][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.272679][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.278818][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.284970][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.290155][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.294984][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.299510][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.305821][T30845] [ 1726.308133][T30845] Uninit was stored to memory at: [ 1726.313144][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1726.318849][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.323977][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.329073][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.334006][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.338486][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.343160][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.349224][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.355379][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.360754][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.365599][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.370094][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.376401][T30845] [ 1726.378715][T30845] Uninit was stored to memory at: [ 1726.383834][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1726.389537][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.394454][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.399643][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.404747][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.409517][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.414191][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.420347][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.426499][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.431780][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.436650][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.441152][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.447460][T30845] [ 1726.449763][T30845] Uninit was stored to memory at: [ 1726.454775][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1726.460482][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.465398][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.470495][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.475637][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.480231][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.484892][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.491392][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.497552][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.503507][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.509004][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.513489][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.519787][T30845] [ 1726.522197][T30845] Uninit was stored to memory at: [ 1726.527380][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1726.533090][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.538240][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.543340][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.548354][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.552855][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.557526][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.563597][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.569731][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.574918][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.579781][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.584264][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.590570][T30845] [ 1726.592872][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1726.599535][T30845] do_recvmmsg+0xc2/0x22e0 [ 1726.603952][T30845] do_recvmmsg+0xc2/0x22e0 [ 1726.845341][T30845] not chained 260000 origins [ 1726.849960][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1726.858627][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.868712][T30845] Call Trace: [ 1726.872010][T30845] dump_stack+0x21c/0x280 [ 1726.876355][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1726.882086][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1726.887476][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1726.892691][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1726.898373][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1726.904452][T30845] ? _copy_from_user+0x201/0x310 [ 1726.909459][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1726.914665][T30845] __msan_chain_origin+0x57/0xa0 [ 1726.919608][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1726.924752][T30845] get_compat_msghdr+0x108/0x2b0 [ 1726.929699][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1726.934211][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1726.939432][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1726.945074][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1726.950365][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1726.955136][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1726.959816][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1726.965621][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1726.970823][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1726.976899][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1726.983331][T30845] __do_fast_syscall_32+0x129/0x180 [ 1726.988541][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1726.993406][T30845] do_SYSENTER_32+0x73/0x90 [ 1726.997916][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.004788][T30845] RIP: 0023:0xf7f28549 [ 1727.008856][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1727.028444][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1727.036835][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1727.044786][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1727.052746][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1727.060701][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1727.068651][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.076719][T30845] Uninit was stored to memory at: [ 1727.081734][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1727.087444][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.092374][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.097465][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.102384][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.106868][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.111540][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.117594][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.123724][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.128898][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.133723][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.138201][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.144508][T30845] [ 1727.146819][T30845] Uninit was stored to memory at: [ 1727.151826][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1727.157520][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.162433][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.167517][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.172431][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.176913][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.181566][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.187622][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.193786][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.198966][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.203792][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.208304][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.215650][T30845] [ 1727.218043][T30845] Uninit was stored to memory at: [ 1727.223062][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1727.228765][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.233691][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.238779][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.243695][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.248176][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.252833][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.258886][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.265015][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.270275][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.275115][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.279597][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.285892][T30845] [ 1727.288194][T30845] Uninit was stored to memory at: [ 1727.293220][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1727.299385][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.304312][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.309424][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.314343][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.318848][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.323514][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.329596][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.335740][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.340920][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.345772][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.350435][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.357194][T30845] [ 1727.359828][T30845] Uninit was stored to memory at: [ 1727.364985][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1727.370700][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.375659][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.382951][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.387898][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.392497][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.397488][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.404075][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.410389][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.415755][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.420782][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.425461][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.432323][T30845] [ 1727.434820][T30845] Uninit was stored to memory at: [ 1727.439853][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1727.445825][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.450770][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.455877][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.460800][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.465374][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.470046][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.477765][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.483917][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.489110][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.493957][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.498634][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.505613][T30845] [ 1727.507931][T30845] Uninit was stored to memory at: [ 1727.512939][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1727.518790][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.523754][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.528848][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.533782][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.538264][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.542919][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.548966][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.555117][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.560291][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.565127][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.569620][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.576780][T30845] [ 1727.579188][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1727.594910][T30845] do_recvmmsg+0xc2/0x22e0 [ 1727.599767][T30845] do_recvmmsg+0xc2/0x22e0 [ 1727.800064][T30845] not chained 270000 origins [ 1727.805415][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1727.814260][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.824317][T30845] Call Trace: [ 1727.827625][T30845] dump_stack+0x21c/0x280 [ 1727.832230][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1727.838058][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1727.844150][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1727.849384][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1727.855029][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1727.861108][T30845] ? _copy_from_user+0x201/0x310 [ 1727.866055][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1727.871353][T30845] __msan_chain_origin+0x57/0xa0 [ 1727.876304][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1727.881428][T30845] get_compat_msghdr+0x108/0x2b0 [ 1727.886421][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1727.890934][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1727.896160][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1727.901915][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1727.908289][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1727.913068][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1727.918106][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1727.923919][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1727.929133][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1727.935313][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1727.941602][T30845] __do_fast_syscall_32+0x129/0x180 [ 1727.946834][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1727.951696][T30845] do_SYSENTER_32+0x73/0x90 [ 1727.956228][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.962555][T30845] RIP: 0023:0xf7f28549 [ 1727.966667][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1727.986370][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1727.994764][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1728.002743][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1728.010913][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1728.018884][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.026838][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.034794][T30845] Uninit was stored to memory at: [ 1728.039860][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1728.045810][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.050748][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.056015][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.061037][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.065523][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.070186][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1728.076293][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1728.082666][T30845] __do_fast_syscall_32+0x129/0x180 [ 1728.088214][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1728.095269][T30845] do_SYSENTER_32+0x73/0x90 [ 1728.099934][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.106338][T30845] [ 1728.109177][T30845] Uninit was stored to memory at: [ 1728.114641][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1728.120368][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.125557][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.131162][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.136268][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.141040][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.145739][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1728.151967][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1728.158123][T30845] __do_fast_syscall_32+0x129/0x180 [ 1728.163657][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1728.168735][T30845] do_SYSENTER_32+0x73/0x90 [ 1728.173532][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.180730][T30845] [ 1728.183059][T30845] Uninit was stored to memory at: [ 1728.188109][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1728.193898][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.199048][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.204164][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.209927][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.214475][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.219160][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1728.225298][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1728.231460][T30845] __do_fast_syscall_32+0x129/0x180 [ 1728.236657][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1728.241504][T30845] do_SYSENTER_32+0x73/0x90 [ 1728.246009][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.252447][T30845] [ 1728.254772][T30845] Uninit was stored to memory at: [ 1728.260121][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1728.265847][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.271519][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.276705][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.281677][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.286423][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.291105][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1728.297434][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1728.303952][T30845] __do_fast_syscall_32+0x129/0x180 [ 1728.309142][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1728.314003][T30845] do_SYSENTER_32+0x73/0x90 [ 1728.318506][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.324994][T30845] [ 1728.327300][T30845] Uninit was stored to memory at: [ 1728.332417][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1728.338310][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.343730][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.349201][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.354134][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.358623][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.363304][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1728.369483][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1728.375648][T30845] __do_fast_syscall_32+0x129/0x180 [ 1728.380864][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1728.385801][T30845] do_SYSENTER_32+0x73/0x90 [ 1728.390893][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.397370][T30845] [ 1728.400290][T30845] Uninit was stored to memory at: [ 1728.405447][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1728.411156][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.416196][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.421650][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.426574][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.431295][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.436042][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1728.442719][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1728.448962][T30845] __do_fast_syscall_32+0x129/0x180 [ 1728.454151][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1728.459068][T30845] do_SYSENTER_32+0x73/0x90 [ 1728.463577][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.469961][T30845] [ 1728.472366][T30845] Uninit was stored to memory at: [ 1728.477458][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1728.483181][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.488188][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.493367][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.498481][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.502969][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.507801][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1728.513876][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1728.520019][T30845] __do_fast_syscall_32+0x129/0x180 [ 1728.525473][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1728.530406][T30845] do_SYSENTER_32+0x73/0x90 [ 1728.534903][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.541218][T30845] [ 1728.543522][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1728.550370][T30845] do_recvmmsg+0xc2/0x22e0 [ 1728.555227][T30845] do_recvmmsg+0xc2/0x22e0 [ 1728.860296][T30845] not chained 280000 origins [ 1728.864929][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1728.873953][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.884190][T30845] Call Trace: [ 1728.887518][T30845] dump_stack+0x21c/0x280 [ 1728.892030][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1728.897864][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1728.903332][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1728.908575][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1728.914832][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1728.924074][T30845] ? _copy_from_user+0x201/0x310 [ 1728.929097][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1728.934561][T30845] __msan_chain_origin+0x57/0xa0 [ 1728.939502][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1728.945369][T30845] get_compat_msghdr+0x108/0x2b0 [ 1728.951111][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1728.955904][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1728.961422][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1728.967396][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1728.973379][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1728.978488][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1728.983180][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1728.989227][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1728.995609][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.001695][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.008036][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.013412][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.018304][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.022956][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.029372][T30845] RIP: 0023:0xf7f28549 [ 1729.033861][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1729.053726][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1729.062123][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1729.070079][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1729.078120][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1729.086082][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1729.094056][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.102020][T30845] Uninit was stored to memory at: [ 1729.107048][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1729.112758][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.117692][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.122804][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.127722][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.132219][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.136893][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.142955][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.149086][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.154266][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.159876][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.164374][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.170774][T30845] [ 1729.173079][T30845] Uninit was stored to memory at: [ 1729.178098][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1729.183808][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.188990][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.194078][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.199180][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.203763][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.208420][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.214472][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.220692][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.225924][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.230859][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.235542][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.241852][T30845] [ 1729.244156][T30845] Uninit was stored to memory at: [ 1729.249163][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1729.254869][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.259782][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.264881][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.269970][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.274487][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.279164][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.285348][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.291496][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.296671][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.301514][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.306001][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.312299][T30845] [ 1729.314615][T30845] Uninit was stored to memory at: [ 1729.319641][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1729.325342][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.330261][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.335347][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.340271][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.344769][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.349433][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.355580][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.361711][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.366903][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.371733][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.376212][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.382504][T30845] [ 1729.384811][T30845] Uninit was stored to memory at: [ 1729.389827][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1729.395534][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.400535][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.405629][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.411062][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.415731][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.420566][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.426633][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.432770][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.437959][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.442802][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.447406][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.453721][T30845] [ 1729.456028][T30845] Uninit was stored to memory at: [ 1729.461046][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1729.466752][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.471665][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.476768][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.481686][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.486257][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.490919][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.496978][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.503120][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.508474][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.513348][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.519578][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.525884][T30845] [ 1729.528188][T30845] Uninit was stored to memory at: [ 1729.533205][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1729.538905][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.543845][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.548944][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.553868][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.559104][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.565475][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.571824][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.578059][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.583253][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.588091][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.592584][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.598889][T30845] [ 1729.601193][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1729.607854][T30845] do_recvmmsg+0xc2/0x22e0 [ 1729.612258][T30845] do_recvmmsg+0xc2/0x22e0 [ 1729.808474][T30845] not chained 290000 origins [ 1729.813110][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1729.821783][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.831843][T30845] Call Trace: [ 1729.835149][T30845] dump_stack+0x21c/0x280 [ 1729.839498][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1729.845267][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1729.850681][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1729.855895][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1729.861715][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1729.867798][T30845] ? _copy_from_user+0x201/0x310 [ 1729.872853][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1729.878058][T30845] __msan_chain_origin+0x57/0xa0 [ 1729.883007][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1729.888297][T30845] get_compat_msghdr+0x108/0x2b0 [ 1729.893272][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1729.898167][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1729.903485][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1729.909302][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1729.914614][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1729.919399][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1729.924100][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1729.929933][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1729.935229][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1729.941309][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1729.947578][T30845] __do_fast_syscall_32+0x129/0x180 [ 1729.952793][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1729.957664][T30845] do_SYSENTER_32+0x73/0x90 [ 1729.962389][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.968806][T30845] RIP: 0023:0xf7f28549 [ 1729.972881][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1729.993185][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1730.001621][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1730.009772][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.017745][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.025981][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.033978][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.042040][T30845] Uninit was stored to memory at: [ 1730.047088][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1730.052791][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.058157][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.063381][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.068319][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.072897][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.077568][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.083615][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.089768][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.094946][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.099787][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.104280][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.110589][T30845] [ 1730.112893][T30845] Uninit was stored to memory at: [ 1730.118004][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1730.123703][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.128631][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.133719][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.138635][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.143290][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.147989][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.154140][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.160308][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.165489][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.170319][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.174823][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.181129][T30845] [ 1730.184347][T30845] Uninit was stored to memory at: [ 1730.189453][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1730.196285][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.202150][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.208365][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.214290][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.218902][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.223558][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.230891][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.237111][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.242315][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.247171][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.251690][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.257996][T30845] [ 1730.260424][T30845] Uninit was stored to memory at: [ 1730.265468][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1730.271346][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.277421][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.282760][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.287728][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.292244][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.296917][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.303073][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.309223][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.314400][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.319229][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.323722][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.330114][T30845] [ 1730.332423][T30845] Uninit was stored to memory at: [ 1730.337448][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1730.343179][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.348125][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.353219][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.358324][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.362830][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.367588][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.373645][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.379805][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.384987][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.389838][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.394755][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.401153][T30845] [ 1730.403560][T30845] Uninit was stored to memory at: [ 1730.408922][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1730.414895][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.420539][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.425651][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.430597][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.435090][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.439770][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.445838][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.452037][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.457241][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.462079][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.466589][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.472887][T30845] [ 1730.475192][T30845] Uninit was stored to memory at: [ 1730.480210][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1730.485903][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.490817][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.496230][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.501166][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.505766][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.510604][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.516689][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.522919][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.528108][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.532972][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.537479][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.543778][T30845] [ 1730.546097][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1730.552750][T30845] do_recvmmsg+0xc2/0x22e0 [ 1730.557140][T30845] do_recvmmsg+0xc2/0x22e0 [ 1730.808190][T30845] not chained 300000 origins [ 1730.812862][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1730.821530][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.831612][T30845] Call Trace: [ 1730.834912][T30845] dump_stack+0x21c/0x280 [ 1730.839251][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1730.844978][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1730.850373][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1730.855577][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1730.861218][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1730.867289][T30845] ? _copy_from_user+0x201/0x310 [ 1730.872214][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1730.877410][T30845] __msan_chain_origin+0x57/0xa0 [ 1730.882344][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1730.888153][T30845] get_compat_msghdr+0x108/0x2b0 [ 1730.893085][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1730.897575][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1730.902761][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1730.908383][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1730.913660][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1730.918432][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1730.923088][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1730.928922][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1730.934128][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1730.941064][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1730.947210][T30845] __do_fast_syscall_32+0x129/0x180 [ 1730.952400][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1730.957227][T30845] do_SYSENTER_32+0x73/0x90 [ 1730.961708][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.968011][T30845] RIP: 0023:0xf7f28549 [ 1730.972078][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1730.992683][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1731.001077][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1731.009027][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.016973][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.024949][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.032912][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.040879][T30845] Uninit was stored to memory at: [ 1731.045900][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.051598][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.056684][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.061859][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.066773][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.071255][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.076010][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.082083][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.088239][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.093421][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.098261][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.102759][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.109074][T30845] [ 1731.111376][T30845] Uninit was stored to memory at: [ 1731.116396][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.122119][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.127055][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.132161][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.137085][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.141586][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.146239][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.152296][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.158462][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.168769][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.173603][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.178084][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.184385][T30845] [ 1731.186692][T30845] Uninit was stored to memory at: [ 1731.191702][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.197407][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.202334][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.207435][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.212623][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.217106][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.221768][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.227837][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.233974][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.239338][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.244194][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.248692][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.255098][T30845] [ 1731.257429][T30845] Uninit was stored to memory at: [ 1731.262535][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.268232][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.273145][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.278243][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.283178][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.287683][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.292442][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.298484][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.304635][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.309897][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.314758][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.319252][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.325641][T30845] [ 1731.327945][T30845] Uninit was stored to memory at: [ 1731.333052][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.338853][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.343775][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.350442][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.355382][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.359875][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.365482][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.371538][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.378235][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.383431][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.388296][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.392789][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.399134][T30845] [ 1731.401442][T30845] Uninit was stored to memory at: [ 1731.406458][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.412157][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.417093][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.422192][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.427138][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.431715][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.436399][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.442543][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.448701][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.453891][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.458734][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.463233][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.469528][T30845] [ 1731.471835][T30845] Uninit was stored to memory at: [ 1731.477367][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.483269][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.488204][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.493414][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.498423][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.503077][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.507751][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.513904][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.520052][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.525340][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.530169][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.534651][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.540964][T30845] [ 1731.543279][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1731.549932][T30845] do_recvmmsg+0xc2/0x22e0 [ 1731.554326][T30845] do_recvmmsg+0xc2/0x22e0 [ 1731.754887][T30845] not chained 310000 origins [ 1731.759509][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1731.768171][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.778202][T30845] Call Trace: [ 1731.781582][T30845] dump_stack+0x21c/0x280 [ 1731.785911][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1731.791616][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1731.797002][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1731.803195][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1731.808828][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1731.815257][T30845] ? _copy_from_user+0x201/0x310 [ 1731.820174][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1731.825532][T30845] __msan_chain_origin+0x57/0xa0 [ 1731.830452][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1731.835555][T30845] get_compat_msghdr+0x108/0x2b0 [ 1731.840509][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1731.845011][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1731.850233][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1731.856025][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1731.861298][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1731.866043][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1731.870704][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1731.876484][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1731.881660][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1731.887811][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1731.893975][T30845] __do_fast_syscall_32+0x129/0x180 [ 1731.899166][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1731.904145][T30845] do_SYSENTER_32+0x73/0x90 [ 1731.908991][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.915317][T30845] RIP: 0023:0xf7f28549 [ 1731.919381][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1731.938972][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1731.947441][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1731.955408][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.963377][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.971329][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.979380][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.988038][T30845] Uninit was stored to memory at: [ 1731.993059][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1731.998908][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.003931][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.009326][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.014349][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.018914][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1732.023610][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1732.029683][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1732.035896][T30845] __do_fast_syscall_32+0x129/0x180 [ 1732.041088][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1732.045923][T30845] do_SYSENTER_32+0x73/0x90 [ 1732.050417][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.056852][T30845] [ 1732.059180][T30845] Uninit was stored to memory at: [ 1732.064189][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1732.069975][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.074910][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.080093][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.085023][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.089510][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1732.094433][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1732.100615][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1732.106766][T30845] __do_fast_syscall_32+0x129/0x180 [ 1732.112223][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1732.117188][T30845] do_SYSENTER_32+0x73/0x90 [ 1732.121681][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.127992][T30845] [ 1732.130419][T30845] Uninit was stored to memory at: [ 1732.135460][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1732.141164][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.146350][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.151444][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.156392][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.160879][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1732.165538][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1732.171630][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1732.177767][T30845] __do_fast_syscall_32+0x129/0x180 [ 1732.182941][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1732.187779][T30845] do_SYSENTER_32+0x73/0x90 [ 1732.192273][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.198580][T30845] [ 1732.200882][T30845] Uninit was stored to memory at: [ 1732.205904][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1732.211620][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.216550][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.221643][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.226566][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.231048][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1732.235797][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1732.241907][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1732.248045][T30845] __do_fast_syscall_32+0x129/0x180 [ 1732.253621][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1732.258508][T30845] do_SYSENTER_32+0x73/0x90 [ 1732.263031][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.269365][T30845] [ 1732.271792][T30845] Uninit was stored to memory at: [ 1732.276921][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1732.282660][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.287591][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.293748][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.298687][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.303189][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1732.307884][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1732.313959][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1732.320204][T30845] __do_fast_syscall_32+0x129/0x180 [ 1732.325412][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1732.330249][T30845] do_SYSENTER_32+0x73/0x90 [ 1732.334747][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.341059][T30845] [ 1732.343368][T30845] Uninit was stored to memory at: [ 1732.348392][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1732.354121][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.359039][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.364149][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.369084][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.373586][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1732.378254][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1732.384306][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1732.390448][T30845] __do_fast_syscall_32+0x129/0x180 [ 1732.395624][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1732.400460][T30845] do_SYSENTER_32+0x73/0x90 [ 1732.404942][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.411332][T30845] [ 1732.413652][T30845] Uninit was stored to memory at: [ 1732.418688][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1732.424590][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.429516][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.434693][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.439610][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.444100][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1732.448843][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1732.454902][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1732.461034][T30845] __do_fast_syscall_32+0x129/0x180 [ 1732.466208][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1732.471047][T30845] do_SYSENTER_32+0x73/0x90 [ 1732.475629][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.482194][T30845] [ 1732.484518][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1732.491264][T30845] do_recvmmsg+0xc2/0x22e0 [ 1732.495689][T30845] do_recvmmsg+0xc2/0x22e0 [ 1732.885172][T30845] not chained 320000 origins [ 1732.889810][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1732.898665][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.909589][T30845] Call Trace: [ 1732.912917][T30845] dump_stack+0x21c/0x280 [ 1732.917617][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1732.923350][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1732.929087][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1732.934469][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1732.940110][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1732.946186][T30845] ? _copy_from_user+0x201/0x310 [ 1732.951132][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1732.956381][T30845] __msan_chain_origin+0x57/0xa0 [ 1732.961351][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1732.966482][T30845] get_compat_msghdr+0x108/0x2b0 [ 1732.971436][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1732.976163][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1732.981403][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1732.987046][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1732.992373][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1732.997144][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.001855][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1733.007673][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1733.012883][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.018961][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.025399][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.030614][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.035487][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.040008][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.046373][T30845] RIP: 0023:0xf7f28549 [ 1733.050689][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1733.070415][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1733.078844][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1733.086831][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.094890][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1733.103067][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.111376][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.119435][T30845] Uninit was stored to memory at: [ 1733.124482][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1733.130221][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.135157][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.140261][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.145196][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.149697][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.154354][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.160439][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.166636][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.171835][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.176666][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.181683][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.188004][T30845] [ 1733.190323][T30845] Uninit was stored to memory at: [ 1733.195345][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1733.201069][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.206111][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.211208][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.216422][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.221115][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.226223][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.232644][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.238904][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.244285][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.249430][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.253946][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.260253][T30845] [ 1733.262578][T30845] Uninit was stored to memory at: [ 1733.267807][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1733.274592][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.279738][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.285286][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.290313][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.295355][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.302244][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.308983][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.315426][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.321357][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.327107][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.331879][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.338410][T30845] [ 1733.340738][T30845] Uninit was stored to memory at: [ 1733.345784][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1733.351519][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.356438][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.361636][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.366675][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.371175][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.375943][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.383352][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.389530][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.394838][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.399800][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.404506][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.410940][T30845] [ 1733.413396][T30845] Uninit was stored to memory at: [ 1733.418581][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1733.424399][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.429325][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.434521][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.439775][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.444464][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.449527][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.456142][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.463738][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.469215][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.475243][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.479868][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.486680][T30845] [ 1733.489233][T30845] Uninit was stored to memory at: [ 1733.494433][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1733.500175][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.505200][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.510490][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.515553][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.520273][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.526226][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.532442][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.538606][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.543829][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.548679][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.553178][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.559666][T30845] [ 1733.562002][T30845] Uninit was stored to memory at: [ 1733.567215][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1733.572938][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.577877][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.582994][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.587910][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.592399][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1733.597066][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1733.603122][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1733.609300][T30845] __do_fast_syscall_32+0x129/0x180 [ 1733.614812][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1733.619766][T30845] do_SYSENTER_32+0x73/0x90 [ 1733.624631][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.631129][T30845] [ 1733.633503][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1733.640277][T30845] do_recvmmsg+0xc2/0x22e0 [ 1733.644715][T30845] do_recvmmsg+0xc2/0x22e0 [ 1733.897287][T30845] not chained 330000 origins [ 1733.901923][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1733.910595][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.920754][T30845] Call Trace: [ 1733.924055][T30845] dump_stack+0x21c/0x280 [ 1733.928555][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1733.934294][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1733.939691][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1733.944907][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1733.950583][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1733.957221][T30845] ? _copy_from_user+0x201/0x310 [ 1733.963598][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1733.969401][T30845] __msan_chain_origin+0x57/0xa0 [ 1733.974443][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1733.979646][T30845] get_compat_msghdr+0x108/0x2b0 [ 1733.985000][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1733.989568][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1733.995922][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1734.001561][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1734.006838][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1734.011594][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.016323][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1734.022128][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1734.027316][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.033527][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.040947][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.046674][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.051709][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.056277][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.062710][T30845] RIP: 0023:0xf7f28549 [ 1734.067000][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1734.086981][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1734.095376][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1734.103417][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1734.111372][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1734.119323][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1734.127283][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.135343][T30845] Uninit was stored to memory at: [ 1734.140367][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1734.146089][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.151020][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.156152][T30845] get_compat_msghdr+0x108/0x2b0 [ 1734.161080][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1734.165658][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.170326][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.176399][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.182809][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.187983][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.192826][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.197392][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.204132][T30845] [ 1734.206436][T30845] Uninit was stored to memory at: [ 1734.211460][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1734.217171][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.222087][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.227174][T30845] get_compat_msghdr+0x108/0x2b0 [ 1734.232096][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1734.236750][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.241437][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.247503][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.253664][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.258897][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.263747][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.268419][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.274738][T30845] [ 1734.277158][T30845] Uninit was stored to memory at: [ 1734.282184][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1734.287900][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.292909][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.298699][T30845] get_compat_msghdr+0x108/0x2b0 [ 1734.303650][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1734.308931][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.313584][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.319714][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.325867][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.331056][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.336081][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.340595][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.346913][T30845] [ 1734.349222][T30845] Uninit was stored to memory at: [ 1734.354362][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1734.360172][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.365104][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.370647][T30845] get_compat_msghdr+0x108/0x2b0 [ 1734.375599][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1734.381523][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.386226][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.392498][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.398840][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.404527][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.409906][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.414498][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.420924][T30845] [ 1734.423230][T30845] Uninit was stored to memory at: [ 1734.428248][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1734.434061][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.439096][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.444275][T30845] get_compat_msghdr+0x108/0x2b0 [ 1734.449214][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1734.453811][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.458577][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.464717][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.470920][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.476321][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.481293][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.486483][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.493678][T30845] [ 1734.496032][T30845] Uninit was stored to memory at: [ 1734.501896][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1734.508144][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.513086][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.518263][T30845] get_compat_msghdr+0x108/0x2b0 [ 1734.523222][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1734.527757][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.532524][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.538566][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.546015][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.551197][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.556103][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.560612][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.566932][T30845] [ 1734.569867][T30845] Uninit was stored to memory at: [ 1734.574884][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1734.581090][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.586049][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.591168][T30845] get_compat_msghdr+0x108/0x2b0 [ 1734.596102][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1734.600908][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1734.605691][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1734.611779][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1734.617950][T30845] __do_fast_syscall_32+0x129/0x180 [ 1734.623161][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1734.628133][T30845] do_SYSENTER_32+0x73/0x90 [ 1734.632638][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.638967][T30845] [ 1734.641276][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1734.648749][T30845] do_recvmmsg+0xc2/0x22e0 [ 1734.653157][T30845] do_recvmmsg+0xc2/0x22e0 [ 1734.914965][T30845] not chained 340000 origins [ 1734.919601][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1734.930529][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.940603][T30845] Call Trace: [ 1734.943928][T30845] dump_stack+0x21c/0x280 [ 1734.948270][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1734.954034][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1734.959417][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1734.964802][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1734.970545][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1734.976637][T30845] ? _copy_from_user+0x201/0x310 [ 1734.981733][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1734.986974][T30845] __msan_chain_origin+0x57/0xa0 [ 1734.991968][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1734.997107][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.003324][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.007951][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1735.013206][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1735.018857][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1735.024179][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1735.028975][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.033669][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1735.039466][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1735.044671][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.050976][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.057631][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.062865][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.067738][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.072330][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.079135][T30845] RIP: 0023:0xf7f28549 [ 1735.083299][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1735.102977][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1735.111384][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1735.119334][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.127298][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1735.135534][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1735.144118][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.152167][T30845] Uninit was stored to memory at: [ 1735.157317][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1735.163125][T30845] __msan_chain_origin+0x57/0xa0 [ 1735.168423][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1735.174942][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.179912][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.184512][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.189407][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.195922][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.202177][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.207365][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.213582][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.218075][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.224942][T30845] [ 1735.228036][T30845] Uninit was stored to memory at: [ 1735.233151][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1735.238871][T30845] __msan_chain_origin+0x57/0xa0 [ 1735.243804][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1735.248902][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.253844][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.258345][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.263290][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.269385][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.275917][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.281219][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.286196][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.291449][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.299067][T30845] [ 1735.301875][T30845] Uninit was stored to memory at: [ 1735.307006][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1735.312757][T30845] __msan_chain_origin+0x57/0xa0 [ 1735.317925][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1735.323239][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.329072][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.333771][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.338538][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.345057][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.351217][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.357705][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.363105][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.367923][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.374935][T30845] [ 1735.377940][T30845] Uninit was stored to memory at: [ 1735.384361][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1735.391457][T30845] __msan_chain_origin+0x57/0xa0 [ 1735.397511][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1735.403526][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.408704][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.413541][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.418636][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.425168][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.432878][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.456571][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.461628][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.466455][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.472875][T30845] [ 1735.475188][T30845] Uninit was stored to memory at: [ 1735.480226][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1735.485974][T30845] __msan_chain_origin+0x57/0xa0 [ 1735.491043][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1735.496325][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.501386][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.506709][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.511543][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.517616][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.523788][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.529000][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.533911][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.538423][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.544922][T30845] [ 1735.547253][T30845] Uninit was stored to memory at: [ 1735.552955][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1735.563695][T30845] __msan_chain_origin+0x57/0xa0 [ 1735.568992][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1735.574849][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.581116][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.586098][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.591030][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.597635][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.603964][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.609557][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.614571][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.619257][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.625582][T30845] [ 1735.627935][T30845] Uninit was stored to memory at: [ 1735.632957][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1735.638687][T30845] __msan_chain_origin+0x57/0xa0 [ 1735.644231][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1735.649368][T30845] get_compat_msghdr+0x108/0x2b0 [ 1735.654298][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1735.658798][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1735.663484][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1735.669547][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1735.675777][T30845] __do_fast_syscall_32+0x129/0x180 [ 1735.680982][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1735.685918][T30845] do_SYSENTER_32+0x73/0x90 [ 1735.690458][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.696932][T30845] [ 1735.699338][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1735.706342][T30845] do_recvmmsg+0xc2/0x22e0 [ 1735.710752][T30845] do_recvmmsg+0xc2/0x22e0 [ 1736.020680][T30845] not chained 350000 origins [ 1736.025489][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1736.034409][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.045144][T30845] Call Trace: [ 1736.048429][T30845] dump_stack+0x21c/0x280 [ 1736.053214][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1736.060644][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1736.067235][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1736.072803][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1736.078905][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1736.085537][T30845] ? _copy_from_user+0x201/0x310 [ 1736.090480][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1736.095763][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.100853][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.106128][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.111072][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.115672][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1736.120950][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1736.126670][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1736.132229][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1736.137325][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.142180][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1736.149025][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1736.154235][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.160322][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.166490][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.171695][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.176562][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.181068][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.187579][T30845] RIP: 0023:0xf7f28549 [ 1736.191656][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1736.211996][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1736.220585][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1736.228550][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1736.236593][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1736.244562][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1736.252531][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.260497][T30845] Uninit was stored to memory at: [ 1736.265551][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1736.271275][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.276246][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.281540][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.286465][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.290962][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.295662][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.301770][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.308141][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.313333][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.318263][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.322764][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.329068][T30845] [ 1736.331388][T30845] Uninit was stored to memory at: [ 1736.336522][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1736.342861][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.347789][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.352892][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.357835][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.362621][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.367368][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.373434][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.379588][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.384803][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.389655][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.394157][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.400552][T30845] [ 1736.402888][T30845] Uninit was stored to memory at: [ 1736.408096][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1736.413863][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.419501][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.424720][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.429664][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.434623][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.439442][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.445590][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.451755][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.458028][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.462940][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.467442][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.475143][T30845] [ 1736.477465][T30845] Uninit was stored to memory at: [ 1736.482571][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1736.488285][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.493419][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.498791][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.503828][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.508429][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.513107][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.519195][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.525591][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.530819][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.535687][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.540204][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.546556][T30845] [ 1736.548969][T30845] Uninit was stored to memory at: [ 1736.553994][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1736.559875][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.564860][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.570091][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.575042][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.579635][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.584300][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.590361][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.596559][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.601774][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.606632][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.611157][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.617470][T30845] [ 1736.619783][T30845] Uninit was stored to memory at: [ 1736.624807][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1736.630545][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.635493][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.640690][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.645618][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.650115][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.654831][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.661206][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.667727][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.672945][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.677794][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.682405][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.688714][T30845] [ 1736.691048][T30845] Uninit was stored to memory at: [ 1736.696085][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1736.701816][T30845] __msan_chain_origin+0x57/0xa0 [ 1736.706946][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1736.713070][T30845] get_compat_msghdr+0x108/0x2b0 [ 1736.718121][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1736.722715][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1736.727384][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1736.733650][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1736.740173][T30845] __do_fast_syscall_32+0x129/0x180 [ 1736.745385][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1736.750683][T30845] do_SYSENTER_32+0x73/0x90 [ 1736.755180][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.762128][T30845] [ 1736.764441][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1736.771298][T30845] do_recvmmsg+0xc2/0x22e0 [ 1736.775727][T30845] do_recvmmsg+0xc2/0x22e0 [ 1736.978954][T30845] not chained 360000 origins [ 1736.983595][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1736.992282][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.002546][T30845] Call Trace: [ 1737.006745][T30845] dump_stack+0x21c/0x280 [ 1737.011091][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1737.016823][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1737.022225][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1737.027434][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1737.033690][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1737.039971][T30845] ? _copy_from_user+0x201/0x310 [ 1737.045109][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1737.050953][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.055990][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.061391][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.066348][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.070866][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1737.076341][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1737.082607][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1737.088640][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1737.093587][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.098272][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1737.105042][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1737.110344][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.116427][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.122664][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.128845][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.133802][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.141998][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.148352][T30845] RIP: 0023:0xf7f28549 [ 1737.152619][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1737.177092][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1737.185537][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1737.194385][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1737.202731][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1737.211317][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.219412][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.227401][T30845] Uninit was stored to memory at: [ 1737.232968][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1737.238696][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.243668][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.248873][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.254048][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.258565][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.263257][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.269337][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.275510][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.280806][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.285748][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.290263][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.296667][T30845] [ 1737.299017][T30845] Uninit was stored to memory at: [ 1737.304063][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1737.310229][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.315182][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.320512][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.325546][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.330349][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.335074][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.341139][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.347283][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.352999][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.357984][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.362664][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.368998][T30845] [ 1737.371316][T30845] Uninit was stored to memory at: [ 1737.376573][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1737.382491][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.387481][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.392690][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.397658][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.402147][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.406803][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.413028][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.419260][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.425248][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.430104][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.434930][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.441239][T30845] [ 1737.443602][T30845] Uninit was stored to memory at: [ 1737.448659][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1737.454464][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.459416][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.464539][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.469473][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.473971][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.478731][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.484988][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.491173][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.496777][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.501992][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.506512][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.512821][T30845] [ 1737.515140][T30845] Uninit was stored to memory at: [ 1737.520173][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1737.525897][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.530923][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.536059][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.541029][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.545722][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.550828][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.561443][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.567856][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.573141][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.578103][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.582601][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.588962][T30845] [ 1737.591286][T30845] Uninit was stored to memory at: [ 1737.596310][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1737.602038][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.607079][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.612202][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.617378][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.621879][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.626668][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.633445][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.640071][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.645357][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.650433][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.654917][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.661218][T30845] [ 1737.663532][T30845] Uninit was stored to memory at: [ 1737.668653][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1737.674364][T30845] __msan_chain_origin+0x57/0xa0 [ 1737.679302][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1737.684665][T30845] get_compat_msghdr+0x108/0x2b0 [ 1737.689720][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1737.694443][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1737.700267][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1737.709717][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1737.715877][T30845] __do_fast_syscall_32+0x129/0x180 [ 1737.721254][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1737.726112][T30845] do_SYSENTER_32+0x73/0x90 [ 1737.730608][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.737297][T30845] [ 1737.739614][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1737.746348][T30845] do_recvmmsg+0xc2/0x22e0 [ 1737.750761][T30845] do_recvmmsg+0xc2/0x22e0 [ 1738.004362][T30845] not chained 370000 origins [ 1738.009059][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1738.018340][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.028669][T30845] Call Trace: [ 1738.031996][T30845] dump_stack+0x21c/0x280 [ 1738.036451][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1738.042199][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1738.047591][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1738.052802][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1738.058483][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1738.064912][T30845] ? _copy_from_user+0x201/0x310 [ 1738.070021][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1738.075335][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.080278][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.085708][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.090633][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.095316][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1738.101853][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1738.107655][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1738.112929][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1738.117774][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.122636][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1738.129142][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1738.135293][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.141451][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.148903][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.154815][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.159691][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.164216][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.170775][T30845] RIP: 0023:0xf7f28549 [ 1738.175024][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1738.197619][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1738.206129][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1738.214104][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1738.222689][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1738.231477][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1738.240773][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.250616][T30845] Uninit was stored to memory at: [ 1738.264354][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1738.270107][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.275759][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.280868][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.286339][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.291722][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.296395][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.302645][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.309138][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.314614][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.319475][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.323972][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.330270][T30845] [ 1738.332595][T30845] Uninit was stored to memory at: [ 1738.337631][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1738.343353][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.348281][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.353388][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.358308][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.362814][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.367572][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.373651][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.379799][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.385236][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.390093][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.394599][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.401041][T30845] [ 1738.403442][T30845] Uninit was stored to memory at: [ 1738.408636][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1738.415877][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.421249][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.427046][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.432958][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.438136][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.443005][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.449424][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.455583][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.460786][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.465636][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.470138][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.476466][T30845] [ 1738.478773][T30845] Uninit was stored to memory at: [ 1738.483829][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1738.489537][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.494450][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.499634][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.504568][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.509059][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.513713][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.519771][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.525932][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.531120][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.535957][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.540450][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.546787][T30845] [ 1738.549102][T30845] Uninit was stored to memory at: [ 1738.554141][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1738.559865][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.564791][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.569878][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.574792][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.579281][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.583953][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.590099][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.596252][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.601438][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.606276][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.610775][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.617091][T30845] [ 1738.619400][T30845] Uninit was stored to memory at: [ 1738.624689][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1738.630487][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.635542][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.640658][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.645603][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.650103][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.654770][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.660852][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.666998][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.672188][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.677012][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.681504][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.687809][T30845] [ 1738.690116][T30845] Uninit was stored to memory at: [ 1738.695135][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1738.700847][T30845] __msan_chain_origin+0x57/0xa0 [ 1738.706296][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1738.711407][T30845] get_compat_msghdr+0x108/0x2b0 [ 1738.716336][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1738.720832][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1738.725510][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1738.731582][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1738.737739][T30845] __do_fast_syscall_32+0x129/0x180 [ 1738.743013][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1738.747944][T30845] do_SYSENTER_32+0x73/0x90 [ 1738.752447][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.758755][T30845] [ 1738.761081][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1738.767763][T30845] do_recvmmsg+0xc2/0x22e0 [ 1738.772179][T30845] do_recvmmsg+0xc2/0x22e0 [ 1738.979107][T30845] not chained 380000 origins [ 1738.983748][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1738.992416][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.002484][T30845] Call Trace: [ 1739.005784][T30845] dump_stack+0x21c/0x280 [ 1739.010164][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1739.015911][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1739.021315][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1739.026526][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1739.032203][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1739.038279][T30845] ? _copy_from_user+0x201/0x310 [ 1739.043223][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1739.048437][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.053388][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.058527][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.063484][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.068041][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1739.073266][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1739.078909][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1739.084206][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1739.088978][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.093664][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1739.099474][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1739.104688][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.110768][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.117110][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.122842][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.127708][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.132223][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.138574][T30845] RIP: 0023:0xf7f28549 [ 1739.142646][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1739.162776][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1739.171215][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1739.179801][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1739.187776][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1739.195777][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1739.203778][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.211756][T30845] Uninit was stored to memory at: [ 1739.216795][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1739.222524][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.227505][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.232731][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.237771][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.242771][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.247461][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.253535][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.259719][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.264924][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.269781][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.274297][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.280608][T30845] [ 1739.282930][T30845] Uninit was stored to memory at: [ 1739.287989][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1739.293776][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.298721][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.303861][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.308906][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.313414][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.318115][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.324224][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.330409][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.335603][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.340443][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.344925][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.351225][T30845] [ 1739.353545][T30845] Uninit was stored to memory at: [ 1739.358566][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1739.364278][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.369202][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.374320][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.379261][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.383764][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.388433][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.394579][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.400715][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.405892][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.410730][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.415235][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.421540][T30845] [ 1739.423854][T30845] Uninit was stored to memory at: [ 1739.428871][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1739.434587][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.439514][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.444620][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.449646][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.454193][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.458869][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.464983][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.471174][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.476367][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.481212][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.485697][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.491994][T30845] [ 1739.494310][T30845] Uninit was stored to memory at: [ 1739.499338][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1739.505071][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.510007][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.515124][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.520056][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.524572][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.529514][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.535593][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.541748][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.546957][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.551805][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.556647][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.563031][T30845] [ 1739.565334][T30845] Uninit was stored to memory at: [ 1739.570354][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1739.576067][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.580998][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.586095][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.591042][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.595531][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.600195][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.606264][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.612499][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.617672][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.622504][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.626995][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.633298][T30845] [ 1739.635600][T30845] Uninit was stored to memory at: [ 1739.640607][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1739.646302][T30845] __msan_chain_origin+0x57/0xa0 [ 1739.651393][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1739.656479][T30845] get_compat_msghdr+0x108/0x2b0 [ 1739.661505][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1739.666002][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1739.670679][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1739.676736][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1739.682881][T30845] __do_fast_syscall_32+0x129/0x180 [ 1739.688071][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1739.692921][T30845] do_SYSENTER_32+0x73/0x90 [ 1739.697404][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.703718][T30845] [ 1739.706022][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1739.712686][T30845] do_recvmmsg+0xc2/0x22e0 [ 1739.717131][T30845] do_recvmmsg+0xc2/0x22e0 [ 1739.934584][T30845] not chained 390000 origins [ 1739.939219][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1739.948064][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.958124][T30845] Call Trace: [ 1739.961428][T30845] dump_stack+0x21c/0x280 [ 1739.965803][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1739.971529][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1739.976908][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1739.982152][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1739.987779][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1739.993893][T30845] ? _copy_from_user+0x201/0x310 [ 1739.999596][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1740.004773][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.009719][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.014829][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.019770][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.024288][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1740.029573][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1740.035220][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1740.040522][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1740.045312][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.050003][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1740.055890][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1740.061092][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.067160][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.073323][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.078506][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.083340][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.087842][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.094154][T30845] RIP: 0023:0xf7f28549 [ 1740.098264][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1740.117860][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1740.126259][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1740.134308][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1740.142364][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1740.150327][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.158474][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.166438][T30845] Uninit was stored to memory at: [ 1740.171451][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1740.177234][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.182238][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.187337][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.192285][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.196802][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.201468][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.207600][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.213745][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.218962][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.223923][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.228415][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.234803][T30845] [ 1740.237110][T30845] Uninit was stored to memory at: [ 1740.242139][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1740.247836][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.252754][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.257840][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.262763][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.267280][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.272237][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.278295][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.284457][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.289637][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.294480][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.298983][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.305301][T30845] [ 1740.307601][T30845] Uninit was stored to memory at: [ 1740.312626][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1740.319288][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.324213][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.330257][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.335190][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.339694][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.344359][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.350416][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.356575][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.361775][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.366623][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.371136][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.377454][T30845] [ 1740.379803][T30845] Uninit was stored to memory at: [ 1740.385118][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1740.390862][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.396523][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.402515][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.407554][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.412070][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.416750][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.422994][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.429130][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.434569][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.439502][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.444073][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.450375][T30845] [ 1740.452710][T30845] Uninit was stored to memory at: [ 1740.457720][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1740.464513][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.469438][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.474529][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.479461][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.483951][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.488641][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.495112][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.501302][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.507119][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.511968][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.516466][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.523109][T30845] [ 1740.525472][T30845] Uninit was stored to memory at: [ 1740.530588][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1740.536284][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.541528][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.546927][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.551899][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.556644][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.561393][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.567908][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.574171][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.579371][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.584216][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.589177][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.595495][T30845] [ 1740.597951][T30845] Uninit was stored to memory at: [ 1740.602995][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1740.608730][T30845] __msan_chain_origin+0x57/0xa0 [ 1740.613673][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1740.618795][T30845] get_compat_msghdr+0x108/0x2b0 [ 1740.623778][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1740.628302][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1740.632969][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1740.639132][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1740.645348][T30845] __do_fast_syscall_32+0x129/0x180 [ 1740.650611][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1740.655447][T30845] do_SYSENTER_32+0x73/0x90 [ 1740.659953][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.666272][T30845] [ 1740.668586][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1740.675254][T30845] do_recvmmsg+0xc2/0x22e0 [ 1740.679662][T30845] do_recvmmsg+0xc2/0x22e0 [ 1740.978105][T30845] not chained 400000 origins [ 1740.982728][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1740.991392][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.001539][T30845] Call Trace: [ 1741.004815][T30845] dump_stack+0x21c/0x280 [ 1741.009144][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1741.014861][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1741.020227][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1741.025465][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1741.031080][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1741.037128][T30845] ? _copy_from_user+0x201/0x310 [ 1741.042056][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1741.047241][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.052158][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.057264][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.062391][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.066897][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1741.072100][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1741.077716][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1741.082997][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1741.087744][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.092411][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1741.098206][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1741.103405][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.109466][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.115616][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.120799][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.125633][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.130473][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.136779][T30845] RIP: 0023:0xf7f28549 [ 1741.140825][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1741.161910][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1741.170309][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1741.178261][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1741.186212][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1741.194182][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1741.202141][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1741.210107][T30845] Uninit was stored to memory at: [ 1741.215134][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1741.220872][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.225811][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.230899][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.235846][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.240328][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.244982][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.251042][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.257188][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.262384][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.267213][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.271697][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.278012][T30845] [ 1741.280315][T30845] Uninit was stored to memory at: [ 1741.285322][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1741.291102][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.296061][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.301169][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.306198][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.310707][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.315382][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.321443][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.330374][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.335565][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.340404][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.344896][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.351202][T30845] [ 1741.353513][T30845] Uninit was stored to memory at: [ 1741.358800][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1741.364517][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.369458][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.374563][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.379483][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.383963][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.388621][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.394707][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.401733][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.406933][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.411766][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.416249][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.422556][T30845] [ 1741.424865][T30845] Uninit was stored to memory at: [ 1741.429908][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1741.436477][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.441397][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.446585][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.451856][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.456348][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.461016][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.467074][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.473224][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.478424][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.483265][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.487759][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.494054][T30845] [ 1741.496358][T30845] Uninit was stored to memory at: [ 1741.501453][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1741.507150][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.512275][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.517382][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.522313][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.526815][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.531476][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.537524][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.543669][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.548853][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.553766][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.558256][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.564552][T30845] [ 1741.566857][T30845] Uninit was stored to memory at: [ 1741.571869][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1741.577571][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.582487][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.587591][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.592523][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.597013][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.601668][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.607713][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.613860][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.619052][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.623894][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.628477][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.634800][T30845] [ 1741.637198][T30845] Uninit was stored to memory at: [ 1741.642204][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1741.647899][T30845] __msan_chain_origin+0x57/0xa0 [ 1741.652842][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1741.658065][T30845] get_compat_msghdr+0x108/0x2b0 [ 1741.663004][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1741.667498][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1741.672173][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1741.678220][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1741.684371][T30845] __do_fast_syscall_32+0x129/0x180 [ 1741.689569][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1741.694395][T30845] do_SYSENTER_32+0x73/0x90 [ 1741.698902][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.705233][T30845] [ 1741.707543][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1741.714204][T30845] do_recvmmsg+0xc2/0x22e0 [ 1741.719052][T30845] do_recvmmsg+0xc2/0x22e0 [ 1741.963693][T30845] not chained 410000 origins [ 1741.968329][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1741.977000][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.987053][T30845] Call Trace: [ 1741.990358][T30845] dump_stack+0x21c/0x280 [ 1741.994704][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1742.000530][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1742.006604][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1742.011834][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1742.017507][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1742.023589][T30845] ? _copy_from_user+0x201/0x310 [ 1742.028534][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1742.033746][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.038700][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.043830][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.048776][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.053288][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1742.060499][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1742.066157][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1742.071627][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1742.076405][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.081132][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1742.086939][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1742.092152][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.098255][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.104424][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.109628][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.114575][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.119197][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.125784][T30845] RIP: 0023:0xf7f28549 [ 1742.129856][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1742.149468][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1742.157885][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1742.165865][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1742.173880][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1742.181854][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.189828][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.197804][T30845] Uninit was stored to memory at: [ 1742.202844][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1742.208568][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.213513][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.218624][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.223632][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.228113][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.232828][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.238987][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.245315][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.250518][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.255368][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.259856][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.266150][T30845] [ 1742.268453][T30845] Uninit was stored to memory at: [ 1742.273685][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1742.279407][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.284341][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.289462][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.294412][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.298921][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.303586][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.309643][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.315797][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.321251][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.326088][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.330581][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.336895][T30845] [ 1742.339294][T30845] Uninit was stored to memory at: [ 1742.344429][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1742.350150][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.355080][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.360618][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.365551][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.370046][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.374712][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.381450][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.387688][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.392888][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.397877][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.402866][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.409346][T30845] [ 1742.411695][T30845] Uninit was stored to memory at: [ 1742.416714][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1742.422517][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.427465][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.432645][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.437561][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.442062][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.446737][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.452807][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.458970][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.464156][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.469083][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.473586][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.480023][T30845] [ 1742.482680][T30845] Uninit was stored to memory at: [ 1742.487693][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1742.493488][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.498690][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.503800][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.508727][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.513239][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.517899][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.523962][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.530108][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.535304][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.540168][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.544663][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.550987][T30845] [ 1742.553328][T30845] Uninit was stored to memory at: [ 1742.558338][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1742.564045][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.568971][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.574087][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.579015][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.583620][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.588393][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.594525][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.601012][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.606392][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.611255][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.615758][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.622740][T30845] [ 1742.625072][T30845] Uninit was stored to memory at: [ 1742.630203][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1742.635918][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.640889][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1742.646000][T30845] get_compat_msghdr+0x108/0x2b0 [ 1742.650958][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1742.655458][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1742.660125][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1742.666186][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1742.672322][T30845] __do_fast_syscall_32+0x129/0x180 [ 1742.677504][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1742.682428][T30845] do_SYSENTER_32+0x73/0x90 [ 1742.686959][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.693267][T30845] [ 1742.695575][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1742.702322][T30845] do_recvmmsg+0xc2/0x22e0 [ 1742.706737][T30845] do_recvmmsg+0xc2/0x22e0 [ 1742.930400][T30845] not chained 420000 origins [ 1742.935035][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1742.943704][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.953764][T30845] Call Trace: [ 1742.957151][T30845] dump_stack+0x21c/0x280 [ 1742.961587][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1742.967323][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1742.972534][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1742.978263][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1742.984518][T30845] ? _copy_from_user+0x201/0x310 [ 1742.989470][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1742.994680][T30845] __msan_chain_origin+0x57/0xa0 [ 1742.999625][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.004769][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.009747][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.014261][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1743.019482][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1743.025142][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1743.030482][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1743.035341][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.040129][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1743.045927][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1743.051201][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.057262][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.063424][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.068620][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.073461][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.077972][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.084276][T30845] RIP: 0023:0xf7f28549 [ 1743.088338][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1743.107930][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1743.116323][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1743.124277][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1743.132313][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1743.140269][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1743.148318][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.156285][T30845] Uninit was stored to memory at: [ 1743.161325][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1743.167057][T30845] __msan_chain_origin+0x57/0xa0 [ 1743.171994][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.177082][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.182008][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.186487][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.191145][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.197189][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.203337][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.208572][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.213509][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.218019][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.224316][T30845] [ 1743.226621][T30845] Uninit was stored to memory at: [ 1743.231633][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1743.237406][T30845] __msan_chain_origin+0x57/0xa0 [ 1743.242525][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.248446][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.253382][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.257883][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.262549][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.268625][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.274801][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.280017][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.284897][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.289387][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.295697][T30845] [ 1743.299998][T30845] Uninit was stored to memory at: [ 1743.305017][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1743.310825][T30845] __msan_chain_origin+0x57/0xa0 [ 1743.315769][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.322423][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.327339][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.331851][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.336518][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.342752][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.348899][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.354078][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.358929][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.363426][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.369748][T30845] [ 1743.372064][T30845] Uninit was stored to memory at: [ 1743.377075][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1743.382777][T30845] __msan_chain_origin+0x57/0xa0 [ 1743.387717][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.392824][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.400850][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.405338][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.410228][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.416383][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.422644][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.427842][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.432688][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.437257][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.443563][T30845] [ 1743.445872][T30845] Uninit was stored to memory at: [ 1743.450885][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1743.456584][T30845] __msan_chain_origin+0x57/0xa0 [ 1743.461516][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.466603][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.471529][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.476190][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.480868][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.486971][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.493674][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.498864][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.503923][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.508422][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.514836][T30845] [ 1743.517320][T30845] Uninit was stored to memory at: [ 1743.522434][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1743.528155][T30845] __msan_chain_origin+0x57/0xa0 [ 1743.533314][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.538881][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.546015][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.560723][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.565392][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.571892][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.578272][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.585034][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.590016][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.594671][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.601255][T30845] [ 1743.603578][T30845] Uninit was stored to memory at: [ 1743.608889][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1743.614726][T30845] __msan_chain_origin+0x57/0xa0 [ 1743.619751][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1743.625371][T30845] get_compat_msghdr+0x108/0x2b0 [ 1743.630420][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1743.635002][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1743.639895][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1743.652585][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1743.658755][T30845] __do_fast_syscall_32+0x129/0x180 [ 1743.664332][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1743.669616][T30845] do_SYSENTER_32+0x73/0x90 [ 1743.674682][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.681127][T30845] [ 1743.683471][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1743.690872][T30845] do_recvmmsg+0xc2/0x22e0 [ 1743.695275][T30845] do_recvmmsg+0xc2/0x22e0 [ 1744.021734][T30845] not chained 430000 origins [ 1744.026553][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1744.035524][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.045672][T30845] Call Trace: [ 1744.048966][T30845] dump_stack+0x21c/0x280 [ 1744.053749][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1744.059692][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1744.065507][T30845] ? idle_cpu+0x9a/0x1d0 [ 1744.069876][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1744.075087][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1744.080808][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1744.086951][T30845] ? _copy_from_user+0x201/0x310 [ 1744.091985][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1744.097187][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.102235][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.107352][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.112306][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.116988][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1744.122284][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1744.127905][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1744.133311][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1744.138058][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.142928][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1744.149545][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1744.154856][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.161019][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.167741][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.173216][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.178070][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.182702][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.189030][T30845] RIP: 0023:0xf7f28549 [ 1744.194016][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1744.213743][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1744.222874][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1744.232058][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.240156][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.248119][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.256534][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.264552][T30845] Uninit was stored to memory at: [ 1744.269728][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1744.276686][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.282671][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.287913][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.293743][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.298969][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.303723][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.309787][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.315957][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.321144][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.327208][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.331737][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.338239][T30845] [ 1744.340557][T30845] Uninit was stored to memory at: [ 1744.345601][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1744.351668][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.356952][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.362133][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.367250][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.372207][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.376975][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.383554][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.389800][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.395104][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.400043][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.404550][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.410878][T30845] [ 1744.413220][T30845] Uninit was stored to memory at: [ 1744.418249][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1744.424010][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.429032][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.434252][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.439187][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.443677][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.448459][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.454541][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.460694][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.465882][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.470729][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.475223][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.481521][T30845] [ 1744.483833][T30845] Uninit was stored to memory at: [ 1744.488849][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1744.495446][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.500379][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.505505][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.510451][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.514961][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.519829][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.526072][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.532227][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.537468][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.542300][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.546801][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.553212][T30845] [ 1744.555532][T30845] Uninit was stored to memory at: [ 1744.560555][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1744.566282][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.571209][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.576395][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.581432][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.585934][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.590616][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.596706][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.602878][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.608146][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.613095][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.617603][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.623910][T30845] [ 1744.626222][T30845] Uninit was stored to memory at: [ 1744.631250][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1744.636969][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.641897][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.646997][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.651933][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.656431][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.661113][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.667179][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.673447][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.678685][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.683533][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.688032][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.694508][T30845] [ 1744.696820][T30845] Uninit was stored to memory at: [ 1744.701864][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1744.707575][T30845] __msan_chain_origin+0x57/0xa0 [ 1744.712519][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1744.717617][T30845] get_compat_msghdr+0x108/0x2b0 [ 1744.722541][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1744.727020][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1744.731707][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1744.738123][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1744.744490][T30845] __do_fast_syscall_32+0x129/0x180 [ 1744.749703][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1744.754611][T30845] do_SYSENTER_32+0x73/0x90 [ 1744.759235][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.765747][T30845] [ 1744.768506][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1744.775219][T30845] do_recvmmsg+0xc2/0x22e0 [ 1744.780184][T30845] do_recvmmsg+0xc2/0x22e0 [ 1744.980896][T30845] not chained 440000 origins [ 1744.985576][T30845] CPU: 0 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1744.994460][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.004710][T30845] Call Trace: [ 1745.008278][T30845] dump_stack+0x21c/0x280 [ 1745.012636][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1745.018376][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1745.024461][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1745.029846][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1745.036070][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1745.042152][T30845] ? _copy_from_user+0x201/0x310 [ 1745.047112][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1745.052323][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.057748][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.062881][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.067943][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.072571][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1745.077983][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1745.083729][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1745.089114][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1745.093890][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.098575][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1745.104629][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1745.110805][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.116888][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.123054][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.128522][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.133438][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.138070][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.144759][T30845] RIP: 0023:0xf7f28549 [ 1745.148840][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1745.168469][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1745.176976][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1745.184952][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1745.192947][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1745.200912][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1745.208877][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1745.216849][T30845] Uninit was stored to memory at: [ 1745.221882][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1745.227621][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.232568][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.237812][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.242777][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.247261][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.252001][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.258135][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.264282][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.269479][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.274322][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.278807][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.285725][T30845] [ 1745.288042][T30845] Uninit was stored to memory at: [ 1745.293154][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1745.298901][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.303831][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.308924][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.313878][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.318387][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.323062][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.329227][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.335370][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.340550][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.345410][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.349899][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.356407][T30845] [ 1745.358716][T30845] Uninit was stored to memory at: [ 1745.363725][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1745.369436][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.374365][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.379580][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.384499][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.389261][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.394209][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.401686][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.407860][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.413071][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.417930][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.422549][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.428890][T30845] [ 1745.431246][T30845] Uninit was stored to memory at: [ 1745.436353][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1745.442211][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.447177][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.452312][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.457271][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.461824][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.466521][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.472605][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.479477][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.484910][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.490128][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.494756][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.502000][T30845] [ 1745.504336][T30845] Uninit was stored to memory at: [ 1745.510442][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1745.518375][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.523790][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.528925][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.533883][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.538424][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.543214][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.549309][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.557262][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.562992][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.567971][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.572588][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.578913][T30845] [ 1745.581258][T30845] Uninit was stored to memory at: [ 1745.586918][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1745.592939][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.597930][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.603503][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.608562][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.613274][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.618065][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.624423][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.630625][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.635877][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.640758][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.645294][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.651721][T30845] [ 1745.654051][T30845] Uninit was stored to memory at: [ 1745.659183][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1745.665190][T30845] __msan_chain_origin+0x57/0xa0 [ 1745.670145][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1745.675470][T30845] get_compat_msghdr+0x108/0x2b0 [ 1745.680445][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1745.684985][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1745.689682][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1745.695767][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1745.702113][T30845] __do_fast_syscall_32+0x129/0x180 [ 1745.707335][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1745.712300][T30845] do_SYSENTER_32+0x73/0x90 [ 1745.716832][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.723162][T30845] [ 1745.725503][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1745.732411][T30845] do_recvmmsg+0xc2/0x22e0 [ 1745.737556][T30845] do_recvmmsg+0xc2/0x22e0 [ 1746.160373][T30845] not chained 450000 origins [ 1746.165173][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1746.174238][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.184599][T30845] Call Trace: [ 1746.188091][T30845] dump_stack+0x21c/0x280 [ 1746.192733][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1746.198557][T30845] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1746.205111][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1746.210767][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1746.216407][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1746.222589][T30845] ? _copy_from_user+0x201/0x310 [ 1746.227534][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1746.232750][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.237698][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.242824][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.247775][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.252285][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1746.257505][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1746.263238][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1746.268620][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1746.273406][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.278210][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1746.284198][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1746.289523][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.295602][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.301786][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.307001][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.311861][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.316368][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.322694][T30845] RIP: 0023:0xf7f28549 [ 1746.326766][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1746.346549][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1746.355399][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1746.363364][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1746.371403][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1746.379359][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1746.387340][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1746.395304][T30845] Uninit was stored to memory at: [ 1746.400332][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1746.406047][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.410978][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.416100][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.421050][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.425595][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.430289][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.436363][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.442523][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.447912][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.452754][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.457237][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.463547][T30845] [ 1746.465855][T30845] Uninit was stored to memory at: [ 1746.470865][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1746.476569][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.481521][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.486634][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.491741][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.496323][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.501010][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.507080][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.513224][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.518528][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.523382][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.527886][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.534187][T30845] [ 1746.536495][T30845] Uninit was stored to memory at: [ 1746.541549][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1746.547295][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.552238][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.557483][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.562429][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.566915][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.571599][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.577663][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.583890][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.589098][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.593969][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.598468][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.604793][T30845] [ 1746.607109][T30845] Uninit was stored to memory at: [ 1746.612122][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1746.617840][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.623003][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.628115][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.633213][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.637963][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.642635][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.648717][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.654915][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.660121][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.664963][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.669458][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.675770][T30845] [ 1746.678094][T30845] Uninit was stored to memory at: [ 1746.683110][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1746.688989][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.693929][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.699206][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.704143][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.708638][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.713308][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.719364][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.725520][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.730722][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.735661][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.740166][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.746577][T30845] [ 1746.748902][T30845] Uninit was stored to memory at: [ 1746.753945][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1746.759676][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.764614][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.769736][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.774761][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.779531][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.784544][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.790689][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.797120][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.802577][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.807408][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.811895][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.818200][T30845] [ 1746.820503][T30845] Uninit was stored to memory at: [ 1746.825522][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1746.831256][T30845] __msan_chain_origin+0x57/0xa0 [ 1746.836502][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1746.841605][T30845] get_compat_msghdr+0x108/0x2b0 [ 1746.846561][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1746.851523][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1746.856318][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1746.862383][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1746.868528][T30845] __do_fast_syscall_32+0x129/0x180 [ 1746.873904][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1746.878762][T30845] do_SYSENTER_32+0x73/0x90 [ 1746.883262][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.889578][T30845] [ 1746.891908][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1746.898676][T30845] do_recvmmsg+0xc2/0x22e0 [ 1746.903102][T30845] do_recvmmsg+0xc2/0x22e0 [ 1747.215999][T30845] not chained 460000 origins [ 1747.220636][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1747.229344][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1747.239409][T30845] Call Trace: [ 1747.242729][T30845] dump_stack+0x21c/0x280 [ 1747.247053][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1747.252824][T30845] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 1747.259282][T30845] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1747.265528][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1747.270716][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1747.276343][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1747.282753][T30845] ? _copy_from_user+0x201/0x310 [ 1747.287862][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1747.293445][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.298377][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.303576][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.309188][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.313761][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1747.318965][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1747.324605][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1747.329986][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1747.334802][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.339499][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1747.345445][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1747.350985][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.357119][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.363289][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.368551][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.373484][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.377979][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.384727][T30845] RIP: 0023:0xf7f28549 [ 1747.388866][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1747.409508][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1747.417911][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1747.426713][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1747.436394][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1747.445947][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1747.454206][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1747.462589][T30845] Uninit was stored to memory at: [ 1747.467822][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1747.473662][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.478767][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.484352][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.489548][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.494045][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.499029][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.505464][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.511607][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.516876][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.521740][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.526291][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.533189][T30845] [ 1747.535521][T30845] Uninit was stored to memory at: [ 1747.540631][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1747.546344][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.551483][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.557468][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.562766][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.567258][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.572066][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.578135][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.584386][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.589564][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.594392][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.598909][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.605217][T30845] [ 1747.607524][T30845] Uninit was stored to memory at: [ 1747.612596][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1747.618319][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.623259][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.628346][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.633275][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.637882][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.642593][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.648675][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.654945][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.660135][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.664993][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.669510][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.675827][T30845] [ 1747.678149][T30845] Uninit was stored to memory at: [ 1747.683163][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1747.688872][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.693787][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.699144][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.704082][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.708570][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.713235][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.719380][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.725539][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.730719][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.735644][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.740144][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.746506][T30845] [ 1747.748821][T30845] Uninit was stored to memory at: [ 1747.753891][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1747.759608][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.764548][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.769670][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.774609][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.779105][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.784050][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.790189][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.796355][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.802037][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.806894][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.811485][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.818278][T30845] [ 1747.820687][T30845] Uninit was stored to memory at: [ 1747.825715][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1747.831536][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.836609][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.841790][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.846742][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.851257][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.855965][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.862031][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.868184][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.873380][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.878243][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.882843][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.889139][T30845] [ 1747.891442][T30845] Uninit was stored to memory at: [ 1747.896445][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1747.902161][T30845] __msan_chain_origin+0x57/0xa0 [ 1747.907090][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1747.912363][T30845] get_compat_msghdr+0x108/0x2b0 [ 1747.917288][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1747.921788][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1747.926457][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1747.932515][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1747.938669][T30845] __do_fast_syscall_32+0x129/0x180 [ 1747.943887][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1747.948732][T30845] do_SYSENTER_32+0x73/0x90 [ 1747.953244][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.959565][T30845] [ 1747.961906][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1747.968587][T30845] do_recvmmsg+0xc2/0x22e0 [ 1747.973013][T30845] do_recvmmsg+0xc2/0x22e0 [ 1748.307864][T30845] not chained 470000 origins [ 1748.312581][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1748.321248][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1748.331317][T30845] Call Trace: [ 1748.334618][T30845] dump_stack+0x21c/0x280 [ 1748.338936][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1748.344652][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1748.350018][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1748.355233][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1748.360845][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1748.366897][T30845] ? _copy_from_user+0x201/0x310 [ 1748.371821][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1748.377010][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.381928][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.387027][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.391966][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1748.396459][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1748.401638][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1748.407259][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1748.412538][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1748.417328][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1748.422150][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1748.427942][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1748.433148][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1748.439307][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1748.445530][T30845] __do_fast_syscall_32+0x129/0x180 [ 1748.450724][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1748.456274][T30845] do_SYSENTER_32+0x73/0x90 [ 1748.460772][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.467085][T30845] RIP: 0023:0xf7f28549 [ 1748.471147][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1748.490852][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1748.499277][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1748.507227][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.515181][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1748.523149][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1748.531109][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.539081][T30845] Uninit was stored to memory at: [ 1748.544119][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1748.549835][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.554801][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.559889][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.564804][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1748.569294][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1748.573963][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1748.580021][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1748.586164][T30845] __do_fast_syscall_32+0x129/0x180 [ 1748.591359][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1748.596312][T30845] do_SYSENTER_32+0x73/0x90 [ 1748.600834][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.607127][T30845] [ 1748.609435][T30845] Uninit was stored to memory at: [ 1748.614544][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1748.620269][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.625220][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.630335][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.635274][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1748.639772][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1748.644433][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1748.650586][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1748.656803][T30845] __do_fast_syscall_32+0x129/0x180 [ 1748.662069][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1748.666904][T30845] do_SYSENTER_32+0x73/0x90 [ 1748.671399][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.677707][T30845] [ 1748.680010][T30845] Uninit was stored to memory at: [ 1748.685019][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1748.691611][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.696554][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.701661][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.706577][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1748.711089][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1748.715769][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1748.721831][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1748.727980][T30845] __do_fast_syscall_32+0x129/0x180 [ 1748.733192][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1748.738114][T30845] do_SYSENTER_32+0x73/0x90 [ 1748.742603][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.748907][T30845] [ 1748.751348][T30845] Uninit was stored to memory at: [ 1748.756381][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1748.762200][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.767515][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.772626][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.777555][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1748.782453][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1748.787373][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1748.793536][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1748.799709][T30845] __do_fast_syscall_32+0x129/0x180 [ 1748.805361][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1748.810324][T30845] do_SYSENTER_32+0x73/0x90 [ 1748.815366][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.822060][T30845] [ 1748.824410][T30845] Uninit was stored to memory at: [ 1748.829826][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1748.835546][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.840480][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.845621][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.850569][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1748.855104][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1748.859805][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1748.865856][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1748.872012][T30845] __do_fast_syscall_32+0x129/0x180 [ 1748.878380][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1748.883405][T30845] do_SYSENTER_32+0x73/0x90 [ 1748.888096][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.894757][T30845] [ 1748.897089][T30845] Uninit was stored to memory at: [ 1748.902702][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1748.908518][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.913467][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.918566][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.924279][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1748.929747][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1748.935083][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1748.941154][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1748.948171][T30845] __do_fast_syscall_32+0x129/0x180 [ 1748.953376][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1748.958529][T30845] do_SYSENTER_32+0x73/0x90 [ 1748.964144][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.970624][T30845] [ 1748.973028][T30845] Uninit was stored to memory at: [ 1748.978053][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1748.983858][T30845] __msan_chain_origin+0x57/0xa0 [ 1748.988823][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1748.994216][T30845] get_compat_msghdr+0x108/0x2b0 [ 1748.999152][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.003679][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.008347][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.015311][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1749.021557][T30845] __do_fast_syscall_32+0x129/0x180 [ 1749.026742][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1749.031682][T30845] do_SYSENTER_32+0x73/0x90 [ 1749.036464][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.043378][T30845] [ 1749.045855][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1749.052816][T30845] do_recvmmsg+0xc2/0x22e0 [ 1749.059911][T30845] do_recvmmsg+0xc2/0x22e0 [ 1749.337127][T30845] not chained 480000 origins [ 1749.341769][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1749.350443][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1749.360529][T30845] Call Trace: [ 1749.363830][T30845] dump_stack+0x21c/0x280 [ 1749.368182][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1749.374711][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1749.380092][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1749.385407][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1749.391054][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1749.397776][T30845] ? _copy_from_user+0x201/0x310 [ 1749.402744][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1749.407961][T30845] __msan_chain_origin+0x57/0xa0 [ 1749.412910][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1749.418381][T30845] get_compat_msghdr+0x108/0x2b0 [ 1749.424068][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.428670][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1749.433974][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1749.439617][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1749.444999][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1749.450726][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.456476][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1749.462638][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1749.467839][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.473941][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1749.480178][T30845] __do_fast_syscall_32+0x129/0x180 [ 1749.485389][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1749.490226][T30845] do_SYSENTER_32+0x73/0x90 [ 1749.494713][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.501119][T30845] RIP: 0023:0xf7f28549 [ 1749.505797][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1749.525488][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1749.536940][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1749.545006][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1749.553248][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1749.561658][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1749.569869][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.578350][T30845] Uninit was stored to memory at: [ 1749.583759][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1749.591036][T30845] __msan_chain_origin+0x57/0xa0 [ 1749.595991][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1749.601116][T30845] get_compat_msghdr+0x108/0x2b0 [ 1749.606061][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.610575][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.615389][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.621489][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1749.627651][T30845] __do_fast_syscall_32+0x129/0x180 [ 1749.632853][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1749.638196][T30845] do_SYSENTER_32+0x73/0x90 [ 1749.643165][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.649736][T30845] [ 1749.652080][T30845] Uninit was stored to memory at: [ 1749.657096][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1749.662807][T30845] __msan_chain_origin+0x57/0xa0 [ 1749.667833][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1749.673883][T30845] get_compat_msghdr+0x108/0x2b0 [ 1749.680612][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.685128][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.689898][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.700405][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1749.706573][T30845] __do_fast_syscall_32+0x129/0x180 [ 1749.711813][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1749.721832][T30845] do_SYSENTER_32+0x73/0x90 [ 1749.726615][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.733072][T30845] [ 1749.735399][T30845] Uninit was stored to memory at: [ 1749.740782][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1749.746524][T30845] __msan_chain_origin+0x57/0xa0 [ 1749.751898][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1749.757004][T30845] get_compat_msghdr+0x108/0x2b0 [ 1749.761949][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.766545][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.771466][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.777616][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1749.783775][T30845] __do_fast_syscall_32+0x129/0x180 [ 1749.788985][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1749.793829][T30845] do_SYSENTER_32+0x73/0x90 [ 1749.798310][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.804621][T30845] [ 1749.807053][T30845] Uninit was stored to memory at: [ 1749.812206][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1749.817922][T30845] __msan_chain_origin+0x57/0xa0 [ 1749.823738][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1749.828929][T30845] get_compat_msghdr+0x108/0x2b0 [ 1749.833851][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.838673][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.843807][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.849970][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1749.856226][T30845] __do_fast_syscall_32+0x129/0x180 [ 1749.861599][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1749.866472][T30845] do_SYSENTER_32+0x73/0x90 [ 1749.870963][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.877380][T30845] [ 1749.879792][T30845] Uninit was stored to memory at: [ 1749.884930][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1749.890725][T30845] __msan_chain_origin+0x57/0xa0 [ 1749.895867][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1749.901092][T30845] get_compat_msghdr+0x108/0x2b0 [ 1749.906030][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.910520][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.915223][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.921411][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1749.927754][T30845] __do_fast_syscall_32+0x129/0x180 [ 1749.932964][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1749.937810][T30845] do_SYSENTER_32+0x73/0x90 [ 1749.942319][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.948623][T30845] [ 1749.950970][T30845] Uninit was stored to memory at: [ 1749.956210][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1749.963156][T30845] __msan_chain_origin+0x57/0xa0 [ 1749.968364][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1749.973550][T30845] get_compat_msghdr+0x108/0x2b0 [ 1749.978948][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1749.983715][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1749.988903][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1749.995849][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.002133][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.007580][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.012513][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.017529][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.023931][T30845] [ 1750.026270][T30845] Uninit was stored to memory at: [ 1750.031576][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1750.037571][T30845] __msan_chain_origin+0x57/0xa0 [ 1750.042855][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1750.047962][T30845] get_compat_msghdr+0x108/0x2b0 [ 1750.053484][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1750.058236][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1750.063083][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1750.069324][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.075796][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.081135][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.086270][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.092347][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.098745][T30845] [ 1750.101071][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1750.108029][T30845] do_recvmmsg+0xc2/0x22e0 [ 1750.112455][T30845] do_recvmmsg+0xc2/0x22e0 [ 1750.398352][T30845] not chained 490000 origins [ 1750.403165][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1750.411877][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.422229][T30845] Call Trace: [ 1750.425511][T30845] dump_stack+0x21c/0x280 [ 1750.429865][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1750.435695][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1750.441522][T30845] ? idle_cpu+0x9a/0x1d0 [ 1750.445854][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1750.451050][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1750.456955][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1750.463029][T30845] ? _copy_from_user+0x201/0x310 [ 1750.467948][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1750.473632][T30845] __msan_chain_origin+0x57/0xa0 [ 1750.478832][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1750.483964][T30845] get_compat_msghdr+0x108/0x2b0 [ 1750.488930][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1750.493536][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1750.498772][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1750.504424][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1750.509833][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1750.516873][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1750.523237][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1750.529260][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1750.534575][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1750.540864][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.547486][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.552684][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.557522][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.562042][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.568377][T30845] RIP: 0023:0xf7f28549 [ 1750.572446][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1750.592040][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1750.600551][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1750.608610][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1750.616575][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1750.624550][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1750.632518][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.642483][T30845] Uninit was stored to memory at: [ 1750.647863][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1750.653569][T30845] __msan_chain_origin+0x57/0xa0 [ 1750.658492][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1750.663682][T30845] get_compat_msghdr+0x108/0x2b0 [ 1750.668698][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1750.673210][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1750.677887][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1750.683937][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.690072][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.695344][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.700184][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.704684][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.710994][T30845] [ 1750.713299][T30845] Uninit was stored to memory at: [ 1750.718497][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1750.724210][T30845] __msan_chain_origin+0x57/0xa0 [ 1750.729404][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1750.734524][T30845] get_compat_msghdr+0x108/0x2b0 [ 1750.739454][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1750.743954][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1750.748619][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1750.754713][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.760862][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.766048][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.770891][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.775402][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.781794][T30845] [ 1750.784115][T30845] Uninit was stored to memory at: [ 1750.789138][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1750.794853][T30845] __msan_chain_origin+0x57/0xa0 [ 1750.801086][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1750.806199][T30845] get_compat_msghdr+0x108/0x2b0 [ 1750.811123][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1750.815606][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1750.820272][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1750.826412][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.832687][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.837878][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.842771][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.847302][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.853616][T30845] [ 1750.855936][T30845] Uninit was stored to memory at: [ 1750.860963][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1750.866683][T30845] __msan_chain_origin+0x57/0xa0 [ 1750.871616][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1750.876751][T30845] get_compat_msghdr+0x108/0x2b0 [ 1750.882127][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1750.890212][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1750.895007][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1750.901201][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.907340][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.912541][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.917369][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.921875][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.928257][T30845] [ 1750.930575][T30845] Uninit was stored to memory at: [ 1750.936395][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1750.942113][T30845] __msan_chain_origin+0x57/0xa0 [ 1750.947049][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1750.952158][T30845] get_compat_msghdr+0x108/0x2b0 [ 1750.957300][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1750.961795][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1750.966453][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1750.972504][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1750.978760][T30845] __do_fast_syscall_32+0x129/0x180 [ 1750.983973][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1750.988832][T30845] do_SYSENTER_32+0x73/0x90 [ 1750.993403][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.999708][T30845] [ 1751.002035][T30845] Uninit was stored to memory at: [ 1751.007056][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1751.012762][T30845] __msan_chain_origin+0x57/0xa0 [ 1751.017706][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1751.022952][T30845] get_compat_msghdr+0x108/0x2b0 [ 1751.028001][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1751.032506][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1751.037615][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1751.043888][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1751.050136][T30845] __do_fast_syscall_32+0x129/0x180 [ 1751.055945][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1751.060924][T30845] do_SYSENTER_32+0x73/0x90 [ 1751.065544][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.071868][T30845] [ 1751.074196][T30845] Uninit was stored to memory at: [ 1751.079225][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1751.084960][T30845] __msan_chain_origin+0x57/0xa0 [ 1751.090488][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1751.095612][T30845] get_compat_msghdr+0x108/0x2b0 [ 1751.100650][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1751.105436][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1751.111067][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1751.117299][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1751.123702][T30845] __do_fast_syscall_32+0x129/0x180 [ 1751.128987][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1751.133932][T30845] do_SYSENTER_32+0x73/0x90 [ 1751.138553][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.145297][T30845] [ 1751.147614][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1751.155389][T30845] do_recvmmsg+0xc2/0x22e0 [ 1751.160352][T30845] do_recvmmsg+0xc2/0x22e0 [ 1751.487234][T30845] not chained 500000 origins [ 1751.491953][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1751.500628][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.510791][T30845] Call Trace: [ 1751.514152][T30845] dump_stack+0x21c/0x280 [ 1751.519535][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1751.525237][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1751.530607][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1751.535808][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1751.541426][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1751.547474][T30845] ? _copy_from_user+0x201/0x310 [ 1751.552409][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1751.557617][T30845] __msan_chain_origin+0x57/0xa0 [ 1751.562832][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1751.567937][T30845] get_compat_msghdr+0x108/0x2b0 [ 1751.572888][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1751.577384][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1751.582577][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1751.588187][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1751.593461][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1751.598211][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1751.602867][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1751.608685][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1751.613885][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1751.619948][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1751.626081][T30845] __do_fast_syscall_32+0x129/0x180 [ 1751.631366][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1751.636207][T30845] do_SYSENTER_32+0x73/0x90 [ 1751.641054][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.647353][T30845] RIP: 0023:0xf7f28549 [ 1751.651411][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1751.671025][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1751.679435][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1751.687425][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1751.695392][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1751.703356][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.711324][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.719303][T30845] Uninit was stored to memory at: [ 1751.724356][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1751.730072][T30845] __msan_chain_origin+0x57/0xa0 [ 1751.738044][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1751.743148][T30845] get_compat_msghdr+0x108/0x2b0 [ 1751.748064][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1751.752555][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1751.757212][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1751.763558][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1751.769727][T30845] __do_fast_syscall_32+0x129/0x180 [ 1751.775018][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1751.779854][T30845] do_SYSENTER_32+0x73/0x90 [ 1751.786016][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.794017][T30845] [ 1751.796339][T30845] Uninit was stored to memory at: [ 1751.801479][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1751.807628][T30845] __msan_chain_origin+0x57/0xa0 [ 1751.812742][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1751.818325][T30845] get_compat_msghdr+0x108/0x2b0 [ 1751.823277][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1751.827771][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1751.832885][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1751.840171][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1751.846315][T30845] __do_fast_syscall_32+0x129/0x180 [ 1751.852284][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1751.857150][T30845] do_SYSENTER_32+0x73/0x90 [ 1751.862254][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.868574][T30845] [ 1751.870907][T30845] Uninit was stored to memory at: [ 1751.877352][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1751.883130][T30845] __msan_chain_origin+0x57/0xa0 [ 1751.888162][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1751.894360][T30845] get_compat_msghdr+0x108/0x2b0 [ 1751.900133][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1751.904827][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1751.909516][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1751.915595][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1751.921994][T30845] __do_fast_syscall_32+0x129/0x180 [ 1751.928179][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1751.933049][T30845] do_SYSENTER_32+0x73/0x90 [ 1751.937553][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.943865][T30845] [ 1751.946168][T30845] Uninit was stored to memory at: [ 1751.951188][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1751.956899][T30845] __msan_chain_origin+0x57/0xa0 [ 1751.961819][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1751.966930][T30845] get_compat_msghdr+0x108/0x2b0 [ 1751.971879][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1751.976388][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1751.981144][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1751.987283][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1751.993453][T30845] __do_fast_syscall_32+0x129/0x180 [ 1751.998663][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.003510][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.008000][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.014302][T30845] [ 1752.016608][T30845] Uninit was stored to memory at: [ 1752.021620][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1752.028023][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.032941][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.038038][T30845] get_compat_msghdr+0x108/0x2b0 [ 1752.042980][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1752.047473][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1752.052178][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1752.058346][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1752.064499][T30845] __do_fast_syscall_32+0x129/0x180 [ 1752.069710][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.074567][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.079089][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.085418][T30845] [ 1752.087836][T30845] Uninit was stored to memory at: [ 1752.093475][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1752.099200][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.104150][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.109251][T30845] get_compat_msghdr+0x108/0x2b0 [ 1752.114214][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1752.118813][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1752.123748][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1752.129820][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1752.136003][T30845] __do_fast_syscall_32+0x129/0x180 [ 1752.141196][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.146150][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.150749][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.157079][T30845] [ 1752.159394][T30845] Uninit was stored to memory at: [ 1752.164437][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1752.170149][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.175083][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.180175][T30845] get_compat_msghdr+0x108/0x2b0 [ 1752.185102][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1752.189600][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1752.194833][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1752.200983][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1752.207129][T30845] __do_fast_syscall_32+0x129/0x180 [ 1752.212339][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.217182][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.221674][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.228793][T30845] [ 1752.231113][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1752.237786][T30845] do_recvmmsg+0xc2/0x22e0 [ 1752.242204][T30845] do_recvmmsg+0xc2/0x22e0 [ 1752.531963][T30845] not chained 510000 origins [ 1752.536595][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1752.545356][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.555416][T30845] Call Trace: [ 1752.558728][T30845] dump_stack+0x21c/0x280 [ 1752.563070][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1752.568803][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1752.574189][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1752.579438][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1752.585092][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1752.591180][T30845] ? _copy_from_user+0x201/0x310 [ 1752.596129][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1752.601341][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.606272][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.611556][T30845] get_compat_msghdr+0x108/0x2b0 [ 1752.616503][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1752.621084][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1752.626276][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1752.631898][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1752.637164][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1752.641928][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1752.646588][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1752.652475][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1752.657674][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1752.663725][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1752.669879][T30845] __do_fast_syscall_32+0x129/0x180 [ 1752.675061][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.680427][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.685476][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.691824][T30845] RIP: 0023:0xf7f28549 [ 1752.695888][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1752.715494][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1752.723991][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1752.732236][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.740206][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.748176][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.756148][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.764281][T30845] Uninit was stored to memory at: [ 1752.769401][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1752.775103][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.780043][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.785199][T30845] get_compat_msghdr+0x108/0x2b0 [ 1752.790166][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1752.794652][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1752.799415][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1752.805473][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1752.811889][T30845] __do_fast_syscall_32+0x129/0x180 [ 1752.817137][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.822103][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.826890][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.834158][T30845] [ 1752.836494][T30845] Uninit was stored to memory at: [ 1752.841607][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1752.847346][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.852294][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.857395][T30845] get_compat_msghdr+0x108/0x2b0 [ 1752.862319][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1752.866813][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1752.871513][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1752.877582][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1752.883735][T30845] __do_fast_syscall_32+0x129/0x180 [ 1752.888962][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.893824][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.898318][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.904753][T30845] [ 1752.907076][T30845] Uninit was stored to memory at: [ 1752.912116][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1752.917817][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.922747][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.927837][T30845] get_compat_msghdr+0x108/0x2b0 [ 1752.932779][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1752.937266][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1752.942010][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1752.948055][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1752.954203][T30845] __do_fast_syscall_32+0x129/0x180 [ 1752.959382][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1752.964214][T30845] do_SYSENTER_32+0x73/0x90 [ 1752.968749][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.975098][T30845] [ 1752.977426][T30845] Uninit was stored to memory at: [ 1752.982445][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1752.988146][T30845] __msan_chain_origin+0x57/0xa0 [ 1752.993094][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1752.998202][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.003223][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.007711][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1753.012387][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1753.018610][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1753.024754][T30845] __do_fast_syscall_32+0x129/0x180 [ 1753.029945][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1753.034773][T30845] do_SYSENTER_32+0x73/0x90 [ 1753.039287][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.045688][T30845] [ 1753.048155][T30845] Uninit was stored to memory at: [ 1753.053309][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1753.059182][T30845] __msan_chain_origin+0x57/0xa0 [ 1753.064228][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1753.069418][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.074527][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.080007][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1753.084858][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1753.091010][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1753.097255][T30845] __do_fast_syscall_32+0x129/0x180 [ 1753.102558][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1753.107411][T30845] do_SYSENTER_32+0x73/0x90 [ 1753.111966][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.118352][T30845] [ 1753.120673][T30845] Uninit was stored to memory at: [ 1753.125689][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1753.132177][T30845] __msan_chain_origin+0x57/0xa0 [ 1753.137237][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1753.142339][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.147320][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.151842][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1753.156520][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1753.162713][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1753.168881][T30845] __do_fast_syscall_32+0x129/0x180 [ 1753.174362][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1753.179202][T30845] do_SYSENTER_32+0x73/0x90 [ 1753.184660][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.191159][T30845] [ 1753.193479][T30845] Uninit was stored to memory at: [ 1753.198506][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1753.204221][T30845] __msan_chain_origin+0x57/0xa0 [ 1753.209152][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1753.214241][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.219181][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.224126][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1753.228819][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1753.234988][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1753.241386][T30845] __do_fast_syscall_32+0x129/0x180 [ 1753.246724][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1753.251583][T30845] do_SYSENTER_32+0x73/0x90 [ 1753.256091][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.262399][T30845] [ 1753.264724][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1753.271395][T30845] do_recvmmsg+0xc2/0x22e0 [ 1753.275798][T30845] do_recvmmsg+0xc2/0x22e0 [ 1753.574107][T30845] not chained 520000 origins [ 1753.578720][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1753.587457][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.597582][T30845] Call Trace: [ 1753.600876][T30845] dump_stack+0x21c/0x280 [ 1753.605210][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1753.611128][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1753.616497][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1753.621685][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1753.627309][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1753.633487][T30845] ? _copy_from_user+0x201/0x310 [ 1753.638614][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1753.643950][T30845] __msan_chain_origin+0x57/0xa0 [ 1753.649596][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1753.655757][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.660716][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.665404][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1753.670823][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1753.677235][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1753.682887][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1753.687766][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1753.692577][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1753.699077][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1753.704274][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1753.711233][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1753.718147][T30845] __do_fast_syscall_32+0x129/0x180 [ 1753.723348][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1753.728387][T30845] do_SYSENTER_32+0x73/0x90 [ 1753.732890][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.739249][T30845] RIP: 0023:0xf7f28549 [ 1753.743750][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1753.764537][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1753.773624][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1753.781868][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1753.790015][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1753.797992][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1753.805967][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.813946][T30845] Uninit was stored to memory at: [ 1753.819953][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1753.826289][T30845] __msan_chain_origin+0x57/0xa0 [ 1753.831579][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1753.836894][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.841911][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.847578][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1753.852731][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1753.858819][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1753.864983][T30845] __do_fast_syscall_32+0x129/0x180 [ 1753.870177][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1753.875220][T30845] do_SYSENTER_32+0x73/0x90 [ 1753.879728][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.887129][T30845] [ 1753.889458][T30845] Uninit was stored to memory at: [ 1753.895741][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1753.901479][T30845] __msan_chain_origin+0x57/0xa0 [ 1753.906519][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1753.911614][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.916991][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.921768][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1753.927451][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1753.933737][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1753.939904][T30845] __do_fast_syscall_32+0x129/0x180 [ 1753.945464][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1753.950433][T30845] do_SYSENTER_32+0x73/0x90 [ 1753.954943][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.961273][T30845] [ 1753.963605][T30845] Uninit was stored to memory at: [ 1753.968636][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1753.976504][T30845] __msan_chain_origin+0x57/0xa0 [ 1753.981656][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1753.987549][T30845] get_compat_msghdr+0x108/0x2b0 [ 1753.992622][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1753.997124][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1754.002333][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1754.008397][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1754.014777][T30845] __do_fast_syscall_32+0x129/0x180 [ 1754.019993][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1754.025439][T30845] do_SYSENTER_32+0x73/0x90 [ 1754.029933][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.036326][T30845] [ 1754.038638][T30845] Uninit was stored to memory at: [ 1754.043793][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1754.049532][T30845] __msan_chain_origin+0x57/0xa0 [ 1754.054638][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1754.059773][T30845] get_compat_msghdr+0x108/0x2b0 [ 1754.064721][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1754.069239][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1754.073936][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1754.080296][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1754.086748][T30845] __do_fast_syscall_32+0x129/0x180 [ 1754.092112][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1754.096965][T30845] do_SYSENTER_32+0x73/0x90 [ 1754.101563][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.107980][T30845] [ 1754.110309][T30845] Uninit was stored to memory at: [ 1754.116490][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1754.122254][T30845] __msan_chain_origin+0x57/0xa0 [ 1754.127194][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1754.132393][T30845] get_compat_msghdr+0x108/0x2b0 [ 1754.137313][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1754.141815][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1754.146489][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1754.153061][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1754.159664][T30845] __do_fast_syscall_32+0x129/0x180 [ 1754.164866][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1754.169961][T30845] do_SYSENTER_32+0x73/0x90 [ 1754.174631][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.181107][T30845] [ 1754.183431][T30845] Uninit was stored to memory at: [ 1754.188467][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1754.194210][T30845] __msan_chain_origin+0x57/0xa0 [ 1754.199239][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1754.204636][T30845] get_compat_msghdr+0x108/0x2b0 [ 1754.209780][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1754.214291][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1754.218992][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1754.225144][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1754.231438][T30845] __do_fast_syscall_32+0x129/0x180 [ 1754.236692][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1754.246374][T30845] do_SYSENTER_32+0x73/0x90 [ 1754.252438][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.258915][T30845] [ 1754.261341][T30845] Uninit was stored to memory at: [ 1754.266654][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1754.273022][T30845] __msan_chain_origin+0x57/0xa0 [ 1754.278202][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1754.283499][T30845] get_compat_msghdr+0x108/0x2b0 [ 1754.288566][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1754.293170][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1754.297850][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1754.303922][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1754.310067][T30845] __do_fast_syscall_32+0x129/0x180 [ 1754.315240][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1754.320081][T30845] do_SYSENTER_32+0x73/0x90 [ 1754.324600][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.330913][T30845] [ 1754.333231][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1754.339914][T30845] do_recvmmsg+0xc2/0x22e0 [ 1754.344340][T30845] do_recvmmsg+0xc2/0x22e0 [ 1754.661829][T30845] not chained 530000 origins [ 1754.666548][T30845] CPU: 1 PID: 30845 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 1754.675218][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.685338][T30845] Call Trace: [ 1754.688649][T30845] dump_stack+0x21c/0x280 [ 1754.692980][T30845] kmsan_internal_chain_origin+0x6f/0x130 [ 1754.698838][T30845] ? do_user_addr_fault+0x1045/0x16d0 [ 1754.704219][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1754.709412][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1754.715039][T30845] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1754.721085][T30845] ? _copy_from_user+0x201/0x310 [ 1754.726013][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1754.731287][T30845] __msan_chain_origin+0x57/0xa0 [ 1754.736317][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1754.741446][T30845] get_compat_msghdr+0x108/0x2b0 [ 1754.746384][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1754.750887][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1754.756100][T30845] ? kmsan_internal_set_origin+0x85/0xc0 [ 1754.761801][T30845] ? __msan_poison_alloca+0xe9/0x110 [ 1754.767088][T30845] ? __sys_recvmmsg+0xb5/0x5f0 [ 1754.771846][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1754.776512][T30845] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1754.782310][T30845] ? kmsan_get_metadata+0x116/0x180 [ 1754.787500][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1754.793565][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1754.799720][T30845] __do_fast_syscall_32+0x129/0x180 [ 1754.804906][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1754.809758][T30845] do_SYSENTER_32+0x73/0x90 [ 1754.814277][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.820607][T30845] RIP: 0023:0xf7f28549 [ 1754.824654][T30845] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1754.844400][T30845] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1754.852810][T30845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000ac0 [ 1754.860778][T30845] RDX: 00000000040003a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.868736][T30845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1754.876749][T30845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1754.884736][T30845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.893041][T30845] Uninit was stored to memory at: [ 1754.898069][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1754.904315][T30845] __msan_chain_origin+0x57/0xa0 [ 1754.909250][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1754.914355][T30845] get_compat_msghdr+0x108/0x2b0 [ 1754.919390][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1754.924363][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1754.929124][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1754.935426][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1754.941580][T30845] __do_fast_syscall_32+0x129/0x180 [ 1754.947048][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1754.951902][T30845] do_SYSENTER_32+0x73/0x90 [ 1754.956445][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.962763][T30845] [ 1754.965159][T30845] Uninit was stored to memory at: [ 1754.970186][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1754.975901][T30845] __msan_chain_origin+0x57/0xa0 [ 1754.980845][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1754.986891][T30845] get_compat_msghdr+0x108/0x2b0 [ 1754.992360][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1754.996853][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1755.001535][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1755.007599][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1755.014105][T30845] __do_fast_syscall_32+0x129/0x180 [ 1755.019305][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1755.024828][T30845] do_SYSENTER_32+0x73/0x90 [ 1755.029342][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1755.036366][T30845] [ 1755.038681][T30845] Uninit was stored to memory at: [ 1755.043713][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1755.049519][T30845] __msan_chain_origin+0x57/0xa0 [ 1755.056034][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1755.061146][T30845] get_compat_msghdr+0x108/0x2b0 [ 1755.066090][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1755.070672][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1755.075360][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1755.081772][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1755.088856][T30845] __do_fast_syscall_32+0x129/0x180 [ 1755.094586][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1755.099569][T30845] do_SYSENTER_32+0x73/0x90 [ 1755.104735][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1755.111055][T30845] [ 1755.113576][T30845] Uninit was stored to memory at: [ 1755.118871][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1755.124590][T30845] __msan_chain_origin+0x57/0xa0 [ 1755.129522][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1755.136271][T30845] get_compat_msghdr+0x108/0x2b0 [ 1755.142011][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1755.146531][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1755.151399][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1755.159276][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1755.165606][T30845] __do_fast_syscall_32+0x129/0x180 [ 1755.170801][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1755.176608][T30845] do_SYSENTER_32+0x73/0x90 [ 1755.181113][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1755.188381][T30845] [ 1755.191235][T30845] Uninit was stored to memory at: [ 1755.196612][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1755.202338][T30845] __msan_chain_origin+0x57/0xa0 [ 1755.207272][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1755.212514][T30845] get_compat_msghdr+0x108/0x2b0 [ 1755.217453][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1755.222040][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1755.226705][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1755.232862][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1755.239023][T30845] __do_fast_syscall_32+0x129/0x180 [ 1755.244230][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1755.249095][T30845] do_SYSENTER_32+0x73/0x90 [ 1755.253621][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1755.259923][T30845] [ 1755.262241][T30845] Uninit was stored to memory at: [ 1755.267876][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1755.274549][T30845] __msan_chain_origin+0x57/0xa0 [ 1755.279482][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1755.285150][T30845] get_compat_msghdr+0x108/0x2b0 [ 1755.290089][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1755.294609][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1755.299306][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1755.305868][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1755.312062][T30845] __do_fast_syscall_32+0x129/0x180 [ 1755.317579][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1755.322736][T30845] do_SYSENTER_32+0x73/0x90 [ 1755.327247][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1755.333650][T30845] [ 1755.335959][T30845] Uninit was stored to memory at: [ 1755.340993][T30845] kmsan_internal_chain_origin+0xad/0x130 [ 1755.346728][T30845] __msan_chain_origin+0x57/0xa0 [ 1755.351678][T30845] __get_compat_msghdr+0x6db/0x9d0 [ 1755.356771][T30845] get_compat_msghdr+0x108/0x2b0 [ 1755.361726][T30845] do_recvmmsg+0xdc7/0x22e0 [ 1755.366228][T30845] __sys_recvmmsg+0x340/0x5f0 [ 1755.370893][T30845] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1755.377765][T30845] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1755.383944][T30845] __do_fast_syscall_32+0x129/0x180 [ 1755.389227][T30845] do_fast_syscall_32+0x6a/0xc0 [ 1755.394705][T30845] do_SYSENTER_32+0x73/0x90 [ 1755.399325][T30845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1755.405682][T30845] [ 1755.408013][T30845] Local variable ----msg_sys@do_recvmmsg created at: [ 1755.414887][T30845] do_recvmmsg+0xc2/0x22e0 [ 1755.419323][T30845] do_recvmmsg+0xc2/0x22e0 06:58:00 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={0x0}}, 0x0) 06:58:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x43, 0x0, 0x300) 06:58:00 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) 06:58:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x30000001) 06:58:00 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:58:01 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xff11, &(0x7f0000000000)={0x0}}, 0x0) 06:58:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r0) ioctl$RNDZAPENTCNT(r1, 0x5204, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:58:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x8953, &(0x7f0000000480)=ANY=[]) 06:58:01 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:58:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth1_macvtap\x00'}) 06:58:01 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCCBRK(r0, 0x5428) 06:58:01 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) getsockopt(r0, 0x1, 0x7, 0x0, &(0x7f0000000300)) 06:58:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000480)) 06:58:02 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLCREATE(r0, 0x0, 0x0) 06:58:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:58:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, 0x0) 06:58:02 executing program 1: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="293863d2", @ANYRES16, @ANYBLOB="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"], 0x284}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000700)=0x80) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 06:58:03 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 06:58:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000), 0x4) 06:58:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) sched_setaffinity(r1, 0x42, &(0x7f0000000300)=0xbabf) 06:58:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 06:58:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "9722207eb212646d9c231027e09e996d81f143"}) 06:58:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() tkill(r2, 0x1000000000016) 06:58:04 executing program 4: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 06:58:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, 0x0, 0x0) 06:58:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000140)) 06:58:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 06:58:04 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040055, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:58:04 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080), 0x4) 06:58:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) [ 1760.085523][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:58:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) [ 1760.134586][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:58:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:05 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:05 executing program 4: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 06:58:05 executing program 0: readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/90, 0x5a) [ 1760.701106][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1760.732108][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:58:06 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x5451, 0x0) 06:58:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 06:58:06 executing program 3: r0 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x40, 0x0) fcntl$getown(r0, 0x9) 06:58:06 executing program 4: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) write$P9_RXATTRWALK(r0, 0x0, 0x0) 06:58:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 06:58:06 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:58:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8402, 0x0) write$char_usb(r0, &(0x7f0000000080), 0x0) 06:58:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS2(r1, 0x402c542b, 0x0) 06:58:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$nbd(r1, 0x0, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = gettid() tkill(r2, 0x1000000000016) 06:58:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x29, 0x4a, 0x0, 0x7) 06:58:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000002440)=[{{&(0x7f0000001a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) fcntl$getown(r2, 0x9) 06:58:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={0x0}}, 0x20044001) 06:58:07 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8912, &(0x7f0000000000)={'\x00', {0x2, 0x0, @broadcast}}) 06:58:07 executing program 1: r0 = epoll_create(0x7ff) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:58:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 06:58:08 executing program 0: syz_genetlink_get_family_id$batadv(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0xe801, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xb) 06:58:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}, 0x200400c5) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={0x0}}, 0x20000011) 06:58:08 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4080) 06:58:08 executing program 1: r0 = socket$inet(0x2, 0x4020000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x50}}, 0x0) 06:58:08 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 06:58:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet6(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x2400c014) 06:58:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 06:58:09 executing program 1: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0600e2ffff0aca7effff0000e1ffbffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_proto_private(r2, 0x0, 0x0) 06:58:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f0000044000)) r3 = dup(r1) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 06:58:09 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.capability\x00', 0x0, 0x0, 0x0) 06:58:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000020000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0x5450, 0x0) 06:58:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 1764.483810][T31088] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1764.502446][T31088] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 06:58:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x14, 0x0, 0x0) 06:58:10 executing program 5: creat(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open(&(0x7f0000001a80)='./file0\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r0, r1) fdatasync(r1) 06:58:10 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x10e, 0x4, 0x0, 0x0) 06:58:10 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x902, 0x0) write$tun(r0, 0x0, 0x0) 06:58:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x400000007, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5450, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000100)=0x1e) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) 06:58:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) futimesat(r0, 0x0, 0x0) [ 1765.360852][ T31] audit: type=1804 audit(1604991490.630:17): pid=31107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir554468103/syzkaller.6Fv2bT/1249/file0" dev="sda1" ino=16375 res=1 errno=0 [ 1765.387529][ T31] audit: type=1804 audit(1604991490.660:18): pid=31107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir554468103/syzkaller.6Fv2bT/1249/file0" dev="sda1" ino=16375 res=1 errno=0 06:58:10 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:58:10 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCMGET(r0, 0x5425, 0x0) 06:58:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0xff) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000000)) 06:58:11 executing program 3: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x29, 0x4, 0x0, 0x300) 06:58:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:58:11 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0xd8}}, 0x0) r2 = dup2(r0, r1) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 06:58:11 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5452, &(0x7f0000000400)) 06:58:11 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 06:58:11 executing program 3: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff3e80e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) 06:58:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x5450, 0x0) 06:58:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000003400)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 06:58:12 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$LOOP_SET_CAPACITY(r0, 0x5451) 06:58:12 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$packet_buf(r0, 0x10e, 0x3, 0x0, 0x0) 06:58:12 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000d80), 0x8, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r1, r0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 06:58:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x17, 0x0, 0x0) 06:58:13 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001280)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x5421, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 06:58:13 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x82, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 06:58:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={0x0}}, 0x20008000) 06:58:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create(0xab) r2 = dup2(r0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x21, 0x0, &(0x7f0000000180)) 06:58:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 06:58:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 06:58:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:58:14 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 06:58:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RSETATTR(r0, 0x0, 0x0) 06:58:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x1c3702) write$P9_RREAD(r0, 0x0, 0x0) 06:58:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={0x0}}, 0x0) 06:58:14 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 06:58:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) 06:58:15 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 06:58:15 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) setpgid(0xffffffffffffffff, 0xffffffffffffffff) 06:58:15 executing program 4: r0 = socket(0xa, 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x9, 0xffffff7f}, 0x2000000c, &(0x7f0000000100)={0x0}}, 0x0) 06:58:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') dup2(r0, r1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x5411, 0x960000) 06:58:15 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x24000000) 06:58:16 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000480)=@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @calipso={0x7, 0x8}]}, 0x28) write(r1, 0x0, 0x0) dup2(r1, r0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 06:58:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r2 = dup2(r0, r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 06:58:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={0x0, 0x60}}, 0x20044014) 06:58:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) 06:58:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 06:58:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) fcntl$setpipe(r1, 0x407, 0x0) 06:58:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:58:18 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 06:58:18 executing program 2: r0 = socket$nl_generic(0x2, 0x2, 0x88) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 06:58:18 executing program 4: r0 = epoll_create(0x2) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 06:58:18 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) 06:58:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) dup3(r0, r1, 0x0) getsockopt$sock_int(r1, 0x1, 0x5, 0x0, &(0x7f0000000040)) [ 1773.233114][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:58:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) close(r0) socket(0xa, 0x2, 0x0) r1 = gettid() tkill(r1, 0x14) 06:58:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40034) 06:58:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) dup2(r1, r0) syz_open_pts(r0, 0x0) 06:58:18 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = dup2(r0, r0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 06:58:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RGETATTR(r0, 0x0, 0x0) 06:58:19 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x142, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 06:58:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000003c0)={'lo\x00'}) 06:58:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x60}}, 0x200480c1) 06:58:19 executing program 2: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 06:58:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:20 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000140), 0x2d, &(0x7f00000004c0)={0x0}}, 0x0) 06:58:20 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x0) 06:58:20 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 06:58:21 executing program 0: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 06:58:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 06:58:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) sendto$inet(r0, &(0x7f0000000000)="f9", 0x1, 0x20004010, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 06:58:21 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) 06:58:21 executing program 2: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket$inet6(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040), 0xc) 06:58:21 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000400)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x8001) 06:58:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 06:58:26 executing program 3: r0 = open(&(0x7f0000000180)='./file0\x00', 0x442, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:26 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) close(r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) fchmod(r0, 0x0) 06:58:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x3e, 0x0, 0x0) 06:58:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x800454cf, &(0x7f0000000240)={'sit0\x00', 0x0}) 06:58:26 executing program 5: r0 = inotify_init() ioctl$BTRFS_IOC_RM_DEV(r0, 0x5452, &(0x7f0000001180)={{}, "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"}) 06:58:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x541b, 0x960000) 06:58:27 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000000bc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4$packet(r1, 0x0, 0x0, 0x0) write$nbd(r2, 0x0, 0x0) 06:58:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0x7}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0x20000000) 06:58:27 executing program 4: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x138ff32bbd88784a) 06:58:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 06:58:27 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 06:58:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) write$eventfd(r1, 0x0, 0x0) write$cgroup_devices(r2, 0x0, 0x0) 06:58:27 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:27 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001480)='/dev/full\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000000c0), 0x0, 0xe) 06:58:28 executing program 1: r0 = socket(0xa, 0x80003, 0x3) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x67, 0x0, {0x0, 0x0, 0x8}}, 0x14) ioctl$sock_TIOCOUTQ(r0, 0x890c, &(0x7f0000000000)) 06:58:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 06:58:28 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:28 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:28 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x80042, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) 06:58:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00009646ff26caffffff0000c1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) 06:58:28 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 06:58:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4709f98ec9f3979e"}) 06:58:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 06:58:29 executing program 4: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:58:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:29 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$TCGETX(r0, 0x5425, 0x0) 06:58:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1784.650921][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 06:58:30 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 06:58:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 06:58:30 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:30 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0}}, 0x0) 06:58:30 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:58:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0x5451, 0x0) 06:58:30 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r0, 0x0, 0x0) 06:58:31 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, &(0x7f0000000000)={0x2}, 0x4) 06:58:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) getsockopt$inet_opts(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)) 06:58:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0xfffffd4a}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 06:58:31 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000002e40)={{0x77359400}}, 0x0) 06:58:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 06:58:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000005c0), 0x4) 06:58:32 executing program 5: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:58:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x5451, 0x0) 06:58:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 06:58:32 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010011, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@empty}, {}, {}, 0x800000}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 06:58:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:58:33 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:33 executing program 5: symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) 06:58:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 06:58:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x102, 0x0) write$char_raw(r0, 0x0, 0x0) 06:58:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000340)) 06:58:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev}}, 0x1c, 0x0}}], 0x1, 0x0) 06:58:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5450, 0x0) 06:58:34 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x10, &(0x7f0000000300)) 06:58:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:58:35 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x42) write$binfmt_elf64(r0, 0x0, 0x0) 06:58:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x8940, 0x0) 06:58:35 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000380)=""/4096) 06:58:35 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 06:58:35 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 06:58:35 executing program 2: socket$inet6(0xa, 0x2, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) epoll_create(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) 06:58:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:58:35 executing program 1: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003c40)="92f91dce66c03c8532ee2d078348195cceb538f234485959e3f3", 0x1a}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x0) tkill(r1, 0x1004000000013) 06:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4b36, 0x0) 06:58:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') dup2(r0, r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:58:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x29, 0x21, 0x0, 0x300) 06:58:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0x26d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 06:58:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010002, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 06:58:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = dup(r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r1, &(0x7f00000004c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)) 06:58:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:58:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:58:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:37 executing program 2: r0 = socket(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 06:58:38 executing program 1: r0 = inotify_init1(0x0) mkdir(&(0x7f0000001380)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x8200081d) inotify_rm_watch(r1, r2) 06:58:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 06:58:38 executing program 4: 06:58:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 06:58:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5608, &(0x7f0000000140)) 06:58:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet_int(r1, 0x0, 0x31, 0x0, &(0x7f00000004c0)) 06:58:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:58:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:58:39 executing program 5: r0 = inotify_init() r1 = inotify_init() r2 = dup3(r0, r1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x5450, r0) 06:58:39 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:58:39 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003000000c817fbf192c9b52200000107080000000000000000000000000000000000000000000000004e3fa56eed6dbfc55d3d3555050fc60ed628918ad8e16d0215e057df1d5cfdac28de61681efcbcae8acad54adea0668447720c16d294d6a166cd676d132ffb45c053abd979d47218bb438259a91d320560ec36de1928f4a8e231b4b27bbf4c8a5bb629c96aa38af80f57f573f5b4cf62b9f1c953891d0fde67ba4e9d18c4709b9960b8e87d1602714bdc2733d5690e6eed09c96eb4e4cd7a2f7d250c58828b9e2ba322510a9794411584206b4707672b3eceb145"], 0x28) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) dup2(r1, r0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:58:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 1794.602712][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1794.678844][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 06:58:40 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:58:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 06:58:40 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) 06:58:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc61, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 06:58:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0) 06:58:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup(r0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/138) r2 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x5450, 0x0) signalfd4(r1, 0x0, 0x0, 0x800) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @broadcast}}) dup3(0xffffffffffffffff, r0, 0x0) 06:58:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) 06:58:41 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:58:41 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x100000000, 0x0) ioctl$BLKBSZSET(r0, 0x5452, &(0x7f00000001c0)) 06:58:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/19) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x5450, 0x0) 06:58:41 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) 06:58:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = inotify_init() r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, 0x0) 06:58:42 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:42 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = dup(r1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) tkill(r0, 0x1000000000016) 06:58:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000100)=""/230, &(0x7f0000000080)=0xe6) 06:58:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r2 = gettid() sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 06:58:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)) 06:58:48 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 06:58:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:58:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) tkill(r1, 0x1000000000016) 06:58:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00007b5000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:48 executing program 2: r0 = inotify_init1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1803.525949][T31729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:58:48 executing program 5: r0 = eventfd(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:58:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={0x0}}, 0x240408d0) 06:58:49 executing program 2: r0 = epoll_create(0x7ff) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:58:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 06:58:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = gettid() openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 06:58:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0xffff, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:58:49 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) 06:58:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20004000) 06:58:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c92c2, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 06:58:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8000) 06:58:50 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r0, &(0x7f0000000740), 0xfdef) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 06:58:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, &(0x7f00000000c0)) 06:58:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/dev\x00') close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:58:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff3e80e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, 0x0) 06:58:50 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 06:58:51 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4011) 06:58:51 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS3F(r0, 0x5421, &(0x7f0000007040)) 06:58:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) 06:58:51 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 06:58:51 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) write$tun(r1, 0x0, 0x0) 06:58:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000880) 06:58:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00000acaffffe00000f69c61fc3ba106a200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 06:58:52 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:52 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x809d03, 0x0) 06:58:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x5451, 0x0) 06:58:52 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x4010) 06:58:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x404c850) 06:58:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x10122) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 06:58:53 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$evdev(r0, 0x0, 0x0) 06:58:53 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:58:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup2(r0, r0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:58:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0xc0004) 06:58:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x29, 0x18, 0x0, 0x300) 06:58:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCGICOUNT(r0, 0x5450, 0x0) 06:58:54 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$CHAR_RAW_BSZGET(r0, 0x5450, 0x0) 06:58:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$unix(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:58:54 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:58:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8981, 0x0) 06:58:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001400), 0x8) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 06:58:55 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)) 06:58:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x30) 06:58:55 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') ioctl$TUNSETLINK(r0, 0x541b, 0x1590000) 06:58:55 executing program 3: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:58:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8940, 0x0) 06:58:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={0x0}}, 0x0) 06:58:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0xd, 0x0, 0x0) 06:58:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$sock_void(r1, 0x1, 0x19, 0x0, 0x0) 06:58:56 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) 06:58:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x2, 0x0) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80) dup3(r0, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 06:58:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f00000011c0)='/dev/loop#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}}, 0x0) 06:58:56 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x341, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 06:58:56 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) tkill(r0, 0x1000000000016) 06:58:57 executing program 4: process_vm_writev(0x0, &(0x7f00000002c0), 0x0, &(0x7f0000001700)=[{0x0}], 0x1, 0x0) 06:58:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0003000000000000c9"], 0x28) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r2, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0x0) 06:58:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000340)={0x0, 0x2a, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000500), 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) tkill(r2, 0x1000000000016) 06:58:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000079edee"], 0x14}}, 0x0) 06:58:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) dup2(r0, r1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)) 06:58:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:58:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 06:58:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x19, 0x4) 06:58:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:58:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[], 0x6c1) r2 = dup(r0) write$vga_arbiter(r2, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x9) 06:58:59 executing program 2: r0 = epoll_create(0x7ff) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:58:59 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:58:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) dup3(r0, r1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x12, 0x0, &(0x7f0000000040)) 06:59:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 06:59:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x8, 0x0, &(0x7f0000000040)) 06:59:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:00 executing program 1: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) 06:59:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x6, 0x0, 0x0) 06:59:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000001d00)={0x0}}, 0x10) 06:59:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5452, &(0x7f0000000000)) 06:59:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) 06:59:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) tkill(r1, 0x7) 06:59:01 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) close(r0) socket$nl_generic(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0xf, &(0x7f0000000000)={0x0, 'macvlan0\x00'}, 0x18) 06:59:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:01 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x1, 0x1, &(0x7f0000000040)="46cf4154", 0x4) 06:59:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, 0x0) 06:59:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 06:59:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 06:59:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0600e2ffff0aca7effff0000e1ffbffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 06:59:02 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30d41, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x176) 06:59:03 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/full\x00', 0x0, 0x0) dup2(r0, r2) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) 06:59:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8901, &(0x7f0000000000)) 06:59:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0xdf41dc10be48f0f6) 06:59:08 executing program 1: r0 = epoll_create1(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 06:59:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) tkill(r2, 0xb) 06:59:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$CHAR_RAW_FRASET(r1, 0x1264, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x14) 06:59:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in={0x2, 0x4e22, @empty}, 0x80) r1 = dup(r0) sendto$packet(r1, 0x0, 0xb, 0x8854, 0x0, 0x0) 06:59:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x150, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5450, 0x0) 06:59:08 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffe92}}, 0x0) 06:59:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:59:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0xffffff79) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:59:08 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0x541b, 0x960000) 06:59:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x26c}}, 0x0) 06:59:10 executing program 2: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 06:59:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 06:59:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) tkill(r2, 0x1000000000016) 06:59:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x17, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) 06:59:14 executing program 0: r0 = socket(0xa, 0x3, 0x1) setsockopt$inet_tcp_buf(r0, 0x29, 0x30, 0x0, 0x1d1cdc1637799210) 06:59:14 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:59:14 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:59:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @empty}, 0x10) 06:59:14 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RWALK(r0, &(0x7f0000000380)=ANY=[], 0xfffffeba) write$binfmt_aout(r0, &(0x7f0000000140), 0x20) 06:59:15 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 06:59:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:59:15 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 06:59:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}}, 0x0) 06:59:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 06:59:16 executing program 1: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:59:16 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)) 06:59:16 executing program 5: r0 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x2c1) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x10, 0x0, 0x9) 06:59:16 executing program 4: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x21c) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 06:59:16 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:59:17 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5450, 0x0) 06:59:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 06:59:17 executing program 4: r0 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x0) 06:59:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x16) 06:59:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000300)={0x2, 0x4e20}, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:17 executing program 3: r0 = epoll_create(0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80) 06:59:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000014) 06:59:22 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 06:59:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 06:59:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r1 = dup(r0) sendmmsg$inet(r0, &(0x7f0000004200)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000008340)=ANY=[], 0x1f0}}], 0x1, 0x20008055) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8040) 06:59:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) write$P9_RVERSION(r1, 0x0, 0x0) 06:59:23 executing program 1: faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 06:59:23 executing program 0: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = gettid() r2 = dup(r0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 06:59:23 executing program 3: r0 = open(&(0x7f00000009c0)='./file0\x00', 0x40440, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 06:59:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000004340)='./file0\x00', 0x0, 0xb) 06:59:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0x8912, &(0x7f0000000000)={0x0, 0x0, [], 0x0, 0x0}) 06:59:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:59:24 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) close(r1) tkill(r2, 0x1000000000016) 06:59:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:24 executing program 5: r0 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:59:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xe8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0xb, 0x0, &(0x7f0000000000)) 06:59:25 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x170142, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 06:59:25 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r0, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) 06:59:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) write$P9_RSETATTR(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') tkill(r2, 0x1000000000016) 06:59:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:59:25 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000097c0)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 06:59:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000080)) 06:59:26 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:59:26 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 06:59:26 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) write$cgroup_int(r1, 0x0, 0x0) 06:59:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup3(r1, r0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001a80)=""/114) 06:59:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(r1) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000014) 06:59:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xc802) 06:59:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff8c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) tkill(r2, 0xb) 06:59:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xfffffd91}}, 0x0) 06:59:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 06:59:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x5411, 0x0) getrandom(&(0x7f0000001200)=""/4124, 0x101c, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000380)="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"}) 06:59:27 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5450, 0x0) 06:59:27 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x3fa2b94c5818a977, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:59:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000240)=""/241) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 06:59:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = gettid() tkill(r2, 0x1000000000016) 06:59:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000018c0)='/dev/loop#\x00', 0x7, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001c80)) 06:59:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40400) 06:59:28 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000002000)={&(0x7f0000000e00), 0xc, &(0x7f0000001fc0)={0x0}}, 0x0) 06:59:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000480)=0x80) write$cgroup_pid(r1, 0x0, 0x0) 06:59:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:59:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 06:59:33 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 06:59:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) getpeername$unix(r1, 0x0, &(0x7f0000001300)) 06:59:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000001540)={0x2, 0x4e21, @local}, 0x10) getpeername$inet6(r0, 0x0, &(0x7f0000001600)) 06:59:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40400c4) 06:59:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDFONTOP_COPY(r0, 0x5450, 0x0) 06:59:34 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:34 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000001ec0)) 06:59:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:59:34 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:59:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x100000289) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, 0x0) 06:59:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:59:35 executing program 0: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)) 06:59:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000040)=0x99) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0x2, 0x960000) 06:59:35 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0x5425, 0x0) 06:59:35 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getsockname$netlink(r2, 0x0, &(0x7f0000000200)) 06:59:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x100000104) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000004fc0)={@local}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:59:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) fgetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) 06:59:35 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$unix(r2, &(0x7f0000000200), 0x48eb, 0x0, 0x0, 0xffffffffffffff0d) 06:59:36 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000) 06:59:36 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 06:59:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 06:59:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) r4 = gettid() tkill(r4, 0x1000000000016) 06:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffc68}}, 0x0) 06:59:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000)="ce", 0x1, 0x20000040, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 06:59:37 executing program 2: r0 = socket$inet(0xa, 0x3, 0x4) setsockopt$inet_opts(r0, 0x29, 0x3, 0x0, 0x300) 06:59:37 executing program 5: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0xd7948e96c2eaa887) 06:59:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:59:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') write$evdev(r0, 0x0, 0x0) 06:59:37 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 06:59:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 06:59:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RREAD(r1, 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 06:59:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r0, r1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) 06:59:38 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) 06:59:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:59:38 executing program 0: r0 = socket(0xa, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x6800, 0xffffff7f}, 0x1b, &(0x7f0000000000)={0x0, 0x14}}, 0x0) 06:59:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0xe, 0x0, &(0x7f0000000340)) 06:59:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:59:39 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) write$P9_RWSTAT(r0, 0x0, 0x0) 06:59:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x44000) 06:59:40 executing program 1: r0 = socket(0x2, 0x3, 0x7) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:40 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x12, 0x0, 0x0) 06:59:40 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:41 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7e, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 06:59:41 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:41 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x5451, 0x0) 06:59:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) close(r1) socket$inet(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:41 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x80042, 0x0) write$P9_RXATTRWALK(r0, 0x0, 0x0) 06:59:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) 06:59:41 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x5451, 0x0) 06:59:42 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 06:59:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x4004081) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 06:59:42 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000080)) 06:59:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) 06:59:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:59:42 executing program 4: r0 = socket(0x2, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 06:59:42 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:59:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 06:59:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$FS_IOC_SETVERSION(r1, 0x8912, &(0x7f0000000040)) 06:59:43 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:43 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) signalfd(r0, &(0x7f0000001e40), 0x8) 06:59:43 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000680)={&(0x7f00000000c0), 0xc, &(0x7f0000000640)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 06:59:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$VT_RESIZE(r1, 0x5609, 0x0) 06:59:44 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) 06:59:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1a81ff00fb1701c23a5813b2ab963af1080008"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) 06:59:44 executing program 0: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:44 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5404, &(0x7f0000000080)={0x0, "000000000000000000000000000000000000000000000200000000000000000000000000000040000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000004c000000000000cfee0000000000000000000000002030a4096a4f07a3000000000000000000400000000000000f646957316b808c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000200"}) 06:59:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x5, 0x4) 06:59:44 executing program 4: prctl$PR_SET_FPEXC(0x17, 0x0) 06:59:44 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xe8216e8cff767b51) 06:59:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0xf054b0e114b3829, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) 06:59:45 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:59:45 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 06:59:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 06:59:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) tkill(r2, 0x1000000000016) 06:59:45 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0) 06:59:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) sendmmsg(r2, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 06:59:46 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x2}, 0x200002cc, &(0x7f00000005c0)={0x0, 0x80}}, 0x0) 06:59:46 executing program 4: r0 = socket(0x11, 0x2, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000480)) 06:59:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, &(0x7f00000000c0)=0x80) dup2(r0, r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:59:46 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5450, 0x0) 06:59:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f000000d380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f0000012040)) 06:59:46 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) 06:59:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40001, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 06:59:47 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 06:59:47 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 06:59:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 06:59:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x14000000) 06:59:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) flock(r3, 0x8) 06:59:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) 06:59:47 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:59:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, 0x0, 0x0, 0x10000, 0x0, 0x1a) sendmmsg$sock(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:59:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 06:59:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 06:59:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) dup3(r1, r0, 0x0) lseek(r0, 0x0, 0x0) 06:59:48 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_CTL_ADD(r0, 0x5450, 0x0) 06:59:48 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x5452, &(0x7f0000000000)={0x1, 'veth1\x00'}) 06:59:48 executing program 3: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:59:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x540b, 0x0) 06:59:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000002940)=0x5e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000002940)=0x5e) close(r3) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) 06:59:49 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:59:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) 06:59:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x1, 0x0, 0x0) 06:59:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x201) write$P9_RLERROR(r0, 0x0, 0x0) 06:59:50 executing program 2: sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) 06:59:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) shutdown(r0, 0x0) 06:59:50 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 06:59:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x20) 06:59:50 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) 06:59:50 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0x2f, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x0) 06:59:50 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$evdev(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) dup2(r4, r1) tkill(r0, 0x1000000000016) 06:59:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) 06:59:50 executing program 1: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:50 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:51 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) ioctl$BLKGETSIZE64(r0, 0x5451, 0x0) 06:59:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 06:59:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCMBIC(r1, 0x540b, 0x0) 06:59:51 executing program 4: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfd}}, 0x1c, 0x0}}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003, 0x0) sendfile(r0, r0, 0x0, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) 06:59:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) 06:59:52 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000006c0)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x2, &(0x7f0000000040)={'bond_slave_0\x00'}) 06:59:52 executing program 2: r0 = socket(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004) 06:59:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) tkill(r1, 0x1000000000016) 06:59:52 executing program 3: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:53 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 06:59:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 06:59:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:59:53 executing program 2: r0 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$FICLONE(r2, 0x5451, 0xffffffffffffffff) 06:59:53 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 06:59:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 06:59:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002662e4"], 0x20}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) 06:59:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002e00), 0x0, 0x42, 0x0) 06:59:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:59:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x5451, 0x0) 06:59:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x0) dup2(r0, r1) ioctl$TCSETXW(r1, 0x5427, 0x0) 06:59:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 06:59:55 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x20040, 0x0) getxattr(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)=@random={'user.', '&#\x00'}, 0x0, 0x0) 06:59:55 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x88042, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 06:59:55 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getrandom(&(0x7f00000010c0)=""/4115, 0x1013, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) 06:59:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 06:59:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x31, 0x0, &(0x7f0000000000)) 06:59:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 06:59:55 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) close(r0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5af}) 06:59:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000640)) 06:59:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x5451, 0x0) 06:59:56 executing program 0: r0 = epoll_create(0x5) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 06:59:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x39, 0x0, 0x0) 06:59:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 06:59:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) ioctl$KDSETKEYCODE(r0, 0x541b, &(0x7f0000000040)) 06:59:56 executing program 4: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 06:59:56 executing program 3: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_proto_private(r0, 0x5421, &(0x7f0000000000)) 06:59:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x0) 06:59:57 executing program 0: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:59:57 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)) 06:59:57 executing program 5: process_vm_writev(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1, &(0x7f00000016c0)=[{0x0}], 0x1, 0x0) 06:59:57 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80) 06:59:57 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5450, 0x0) 06:59:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x29, 0x13, 0x0, 0x300) 06:59:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1f) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 06:59:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') dup2(r0, r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 06:59:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) tkill(r2, 0x1000000000016) 06:59:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, 0x0, 0x0) 06:59:58 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 06:59:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000380)=0x1f6) dup2(r0, r1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x10, &(0x7f0000000040), 0x4) 06:59:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x3e, 0x0, 0x0) 06:59:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x2000c080) 06:59:59 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4) 06:59:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={0x0}}, 0x8000) 06:59:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') dup2(r0, r1) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup2(r1, r2) getsockopt$inet6_mreq(r2, 0x29, 0xb, 0x0, &(0x7f0000000080)) 06:59:59 executing program 0: r0 = eventfd2(0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 06:59:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc000, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4004150) 06:59:59 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 06:59:59 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000740)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) 06:59:59 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 07:00:00 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003e80)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) 07:00:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0xc4) 07:00:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000480)='6', 0x1, 0x40, 0x0, 0x0) [ 1875.158091][ T452] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/3' not defined. 07:00:00 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$RNDCLEARPOOL(r0, 0x5451, 0x0) 07:00:00 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 07:00:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 07:00:00 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 07:00:01 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:01 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0xc, &(0x7f0000000000)=@gcm_128={{}, "62b16df2fdce9b23", "912f83b89752087b16c850df2d6b6446", "a1534f14", "47168c6e9f71cb6e"}, 0x28) 07:00:01 executing program 4: r0 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 07:00:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup3(r1, r0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b48, &(0x7f0000000140)) 07:00:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000040)='{vmnet1posix_acl_access@mime_type\x00', 0x0) write$P9_RLINK(r0, 0x0, 0x0) 07:00:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0xc, 0x0, 0x0) 07:00:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}}) 07:00:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f00000001c0)) 07:00:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) tkill(r0, 0x401004000000016) 07:00:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:03 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000d00), 0x4) 07:00:03 executing program 4: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0xfa3) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 07:00:03 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:03 executing program 5: r0 = socket(0x10, 0x3, 0x2) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:03 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x450e01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = dup2(r1, r1) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = dup3(r2, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) clock_getres(0x7, &(0x7f0000000000)) ioctl$CHAR_RAW_GETSIZE64(r3, 0x80081272, 0x0) 07:00:03 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x3, 0x6a}) fcntl$setlease(r0, 0x406, 0x0) 07:00:04 executing program 1: clock_gettime(0xad9fa0e9d8aa008f, 0x0) 07:00:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x7ea4d37caa952578, 0x0) dup2(r0, r1) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000180), 0x4) 07:00:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup(r0) ioctl$HDIO_GETGEO(r2, 0x301, 0x0) tkill(r1, 0xb) 07:00:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup3(r1, r0, 0x0) fsync(r0) 07:00:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$sock_ifreq(r1, 0x8927, &(0x7f0000000000)={'sit0\x00', @ifru_ivalue}) 07:00:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_IOMIN(r1, 0x1278, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 07:00:04 executing program 1: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/98) 07:00:05 executing program 5: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200000841, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 07:00:05 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:00:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 07:00:06 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x0, 0x11, 0x0) 07:00:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={0x0, 0x45, &(0x7f0000000180)={0x0, 0xffffff0a}}, 0x0) 07:00:06 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 07:00:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) dup(0xffffffffffffffff) read$char_raw(0xffffffffffffffff, 0x0, 0xe200) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={0x0}}, 0x20004004) 07:00:11 executing program 0: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 07:00:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(r0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$CHAR_RAW_RAGET(r2, 0x1263, 0x0) 07:00:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:11 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) 07:00:11 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:00:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 07:00:11 executing program 1: r0 = eventfd(0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4) 07:00:11 executing program 5: r0 = inotify_init1(0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 07:00:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_fanout_data(r0, 0x29, 0x49, 0x0, 0x300) 07:00:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340)='/dev/autofs\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:00:12 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) ioctl$BLKPBSZGET(r1, 0x8903, &(0x7f0000000000)) 07:00:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 07:00:12 executing program 4: semctl$SETALL(0x0, 0x0, 0xf, 0x0) 07:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:00:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto$inet(r0, 0x0, 0x0, 0x90d4, 0x0, 0xfffffffffffffe05) 07:00:12 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x5421, 0x400000) 07:00:12 executing program 5: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 07:00:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x4c80, 0x0) 07:00:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 07:00:13 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) 07:00:13 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 07:00:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 07:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:00:14 executing program 3: sched_getparam(0x0, 0x0) socket$inet_udplite(0x2, 0x6, 0x88) 07:00:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r1, 0x80045432, &(0x7f0000000040)=0x0) getpgrp(r2) 07:00:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) getpeername$inet6(r1, 0x0, &(0x7f00000000c0)) 07:00:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x44, 0x0, 0xffffffffffffffa7) 07:00:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='exfat\x00', 0x869048, &(0x7f00000002c0)='\'+.+#-\x00') 07:00:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x12, 0x0, 0x30) 07:00:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CHAR_RAW_DISCARD(r2, 0x1277, 0x0) 07:00:15 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 07:00:15 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 07:00:15 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') ioctl$TIOCSBRK(r0, 0x5427) 07:00:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') dup3(r0, r1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'ipvlan1\x00'}) 07:00:15 executing program 5: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/bus\x00', 0x0) 07:00:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1400c091) 07:00:16 executing program 3: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 07:00:16 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0x6) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) write$cgroup_pid(r0, 0x0, 0x0) 07:00:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup2(r1, r0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x2, &(0x7f00000000c0)) 07:00:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x19, &(0x7f0000000040)={0x2}, 0x3eb) 07:00:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x40044591, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:00:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create(0x7fffffff) dup3(r0, r1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000001e80), 0x4) 07:00:17 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 07:00:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5450, 0x0) 07:00:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) 07:00:17 executing program 0: setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 07:00:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x4b40, 0x0) 07:00:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$char_usb(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 07:00:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00') setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) 07:00:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:00:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r4, r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 07:00:17 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKREPORTZONE(r0, 0x5450, 0x0) 07:00:18 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 07:00:18 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 07:00:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x8800) 07:00:18 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x43, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 07:00:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000000)) 07:00:18 executing program 1: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x31, &(0x7f0000000080), 0x20396578) 07:00:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 07:00:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3e, 0x0, 0x0) 07:00:19 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)) 07:00:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:00:19 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="0003000000c8"], 0x28) dup2(r1, r0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 07:00:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000) 07:00:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x5450, 0x0) 07:00:20 executing program 0: r0 = socket(0x10, 0x2, 0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:20 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:20 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) dup2(r2, r0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@empty}, 0x14) 07:00:20 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:00:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSPGRP(r1, 0x5451, 0x0) 07:00:20 executing program 3: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0xcfe732f7d9891519) 07:00:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) ioprio_set$pid(0x1, r1, 0x0) 07:00:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 07:00:21 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) 07:00:21 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$TUNSETNOCSUM(r0, 0x541b, 0x960000) 07:00:21 executing program 2: r0 = socket(0x10, 0x2, 0x2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:00:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x5450, 0x0) 07:00:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 07:00:22 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RLINK(r0, 0x0, 0x0) 07:00:22 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) write$P9_RWSTAT(r1, 0x0, 0x0) 07:00:22 executing program 5: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:00:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) 07:00:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x0, 0x0, 0x0) 07:00:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000002880)={0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 07:00:22 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') ioctl$VT_RELDISP(r0, 0x540b) 07:00:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback}, 0x10) 07:00:23 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:00:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) shutdown(r0, 0x0) 07:00:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKPG(r1, 0x1269, 0x0) 07:00:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, 0x0, 0x0) 07:00:23 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x13e2b13de2db236) 07:00:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCGABS2F(r2, 0x80044584, &(0x7f0000000180)=""/131) 07:00:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x5451, 0x0) 07:00:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:00:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc001) 07:00:24 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') setns(r0, 0x0) 07:00:24 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 07:00:24 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x0) 07:00:24 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) dup3(r0, r1, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 07:00:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 07:00:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 07:00:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "9cc48d6b270f1200051c25c8994d98d94e0000000005ffffffe400"}) 07:00:25 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = epoll_create(0x7) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TCGETX(r2, 0x5432, 0x0) 07:00:25 executing program 2: capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x3f) 07:00:25 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) 07:00:25 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) 07:00:25 executing program 2: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 07:00:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETX(r1, 0x5433, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:00:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) 07:00:26 executing program 0: r0 = socket(0x1, 0x80005, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:00:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x8940, 0x0) 07:00:26 executing program 1: r0 = socket(0x2, 0x3, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 07:00:26 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$GIO_UNIMAP(r1, 0x5427, 0x0) 07:00:26 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x541b, 0x20410005) syz_genetlink_get_family_id$nl80211(0x0) 07:00:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40481, 0x0) write$cgroup_type(r0, 0x0, 0x0) 07:00:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_FIEMAP(r0, 0x5451, 0x0) 07:00:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000884) 07:00:27 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') close(r0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)) 07:00:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r2, r3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:27 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x5451, 0x0) 07:00:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_STATUS64(r0, 0x5450, 0x0) 07:00:28 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) 07:00:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() ioctl$BLKROGET(r1, 0x125e, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 07:00:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040015) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 07:00:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 07:00:28 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) fchmod(r0, 0x0) 07:00:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:00:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) bind$packet(r1, &(0x7f0000000040), 0x14) 07:00:29 executing program 3: prctl$PR_GET_NO_NEW_PRIVS(0x25) 07:00:29 executing program 5: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x2, 0x960000) 07:00:29 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000340)=0x80) dup2(r0, r1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x4b, 0x0, &(0x7f0000000280)) 07:00:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x42) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:00:34 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:34 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff9c, 0x0, 0x0, 0x20010000000007) 07:00:34 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:34 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = dup3(r1, r2, 0x0) write$cgroup_type(r3, 0x0, 0x0) 07:00:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 07:00:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:00:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000003c0)) 07:00:35 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x90) 07:00:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101002, 0x0) tkill(r1, 0x1000000000016) 07:00:35 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x8953, &(0x7f00000004c0)={'sit0\x00', 0x0}) 07:00:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 07:00:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net\x00') dup2(r0, r1) ioctl$TIOCCONS(r1, 0x5409) 07:00:36 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) 07:00:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = dup3(r1, r0, 0x0) write$binfmt_elf64(r0, 0x0, 0x6c1) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}}, 0x20004000) 07:00:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCNXCL(r2, 0x540d) 07:00:41 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000008c0), 0x8) 07:00:41 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 07:00:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) 07:00:41 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$RNDGETENTCNT(r0, 0x5450, 0x0) 07:00:41 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 07:00:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4080) 07:00:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:00:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x4880) 07:00:41 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup2(r0, r0) write$P9_RGETLOCK(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 07:00:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r0, 0x0, 0x0) 07:00:41 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:00:41 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002680)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x31, 0x0, &(0x7f0000000000)) 07:00:42 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:42 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 07:00:42 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_script(r0, 0x0, 0x0) 07:00:42 executing program 0: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)) 07:00:42 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:00:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:00:43 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0x0) 07:00:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKREPORTZONE(r0, 0x2, &(0x7f0000000740)) 07:00:43 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 07:00:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xf) tkill(r1, 0x1000000000016) 07:00:43 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:00:43 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) setns(r0, 0x0) 07:00:43 executing program 3: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:00:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 07:00:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010041, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$char_raw(r1, 0x0, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = gettid() tkill(r2, 0x1000000000016) 07:00:44 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:44 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(0x0, 0x0) 07:00:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) 07:00:44 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KDMKTONE(r2, 0x541b, 0x20000001) 07:00:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0) 07:00:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x125d, 0x0) 07:00:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 07:00:45 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) 07:00:45 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 07:00:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000001c40), 0x4) 07:00:45 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0x12, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 07:00:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 07:00:46 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='uid_map\x00') r3 = dup2(r0, r1) r4 = dup2(r3, r2) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:00:46 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 07:00:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) write$P9_RGETLOCK(r3, 0x0, 0x22) tkill(r0, 0x1000000000016) 07:00:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 07:00:46 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001100)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:00:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) dup2(r0, r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:00:47 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_crypto(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 07:00:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x0) r2 = dup2(r0, r1) ioctl$IOC_PR_PREEMPT(r2, 0x5450, 0x0) 07:00:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:00:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:47 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c04, 0x0) 07:00:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:00:47 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 07:00:47 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000e80)={&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2}, 0x20004001) 07:00:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDADDIO(r0, 0x540b, 0x0) 07:00:48 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x5451, 0x0) 07:00:48 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040004) 07:00:48 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001200)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random]}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x89}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) 07:00:48 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0) 07:00:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 07:00:48 executing program 0: r0 = inotify_init() close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:00:49 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x30842, 0x0) write$evdev(r0, 0x0, 0x0) 07:00:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) 07:00:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$KDGETLED(r3, 0x4b31, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 07:00:50 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:00:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:00:50 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000000), 0x2, 0x0) 07:00:50 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 07:00:50 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 07:00:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TIOCL_PASTESEL(r1, 0x541b, &(0x7f0000000000)) 07:00:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x100000289) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$CHAR_RAW_RRPART(r1, 0x125f, 0x0) 07:00:50 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 07:00:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 07:00:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) 07:00:51 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000200)) 07:00:51 executing program 2: r0 = socket$unix(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 07:00:51 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 07:00:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0x541b, 0x960000) 07:00:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup3(r2, r0, 0x0) write$P9_RMKNOD(r3, 0x0, 0x0) write$P9_RXATTRCREATE(r2, 0x0, 0x0) 07:00:51 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) 07:00:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 07:00:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000029c0)={@multicast2, @local, @multicast1}, 0xc) 07:00:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "80000000fb1300000100"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) 07:00:52 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x80) 07:00:52 executing program 2: shmget(0x3, 0x400000, 0x200, &(0x7f0000bfe000/0x400000)=nil) 07:00:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'lo\x00'}) 07:00:53 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 07:00:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(r0, 0x0, 0x0) 07:00:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$KDSIGACCEPT(r1, 0x402c542c, 0x930000) 07:00:53 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x540d, 0x0) 07:00:53 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x5451, 0x0) 07:00:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 07:00:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc004) 07:00:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001c80), 0x4) 07:00:54 executing program 5: r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x401004000000016) 07:00:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x4, 0x0, &(0x7f00000006c0)) 07:00:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) dup2(r0, r1) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)) 07:00:55 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x88c0) 07:00:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:55 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/11, 0x232) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x8001004000000016) 07:00:55 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 07:00:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80) write$binfmt_script(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockname(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000100)=0x1de) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 07:00:55 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:00:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:00:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r1, 0x0, r1) write$9p(r2, 0x0, 0x0) 07:00:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000280)=@unspec, 0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x148}}, 0x0) 07:00:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) dup2(r0, r1) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@local}, 0x14) 07:00:56 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) getpeername(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) r3 = socket(0x10, 0x2, 0x0) getpeername(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) dup2(r0, r4) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:00:56 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x1f0) dup2(r0, r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x8903, &(0x7f0000000200)) 07:00:56 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 07:00:56 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}], 0x4000006, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40) 07:00:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x10e, 0x5, 0x0, 0x0) 07:00:57 executing program 3: r0 = inotify_init() close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) 07:00:57 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:57 executing program 0: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0xb95c9714d0ee62bc) 07:00:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 07:00:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, 0x0) 07:00:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:00:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:00:57 executing program 0: socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040), 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 07:00:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{}, "99c1d48b71635a74", "0a470328232dcb8ca9671365128c1129", "c4c0c8ef", "bf9474d5d92d32be"}, 0x28) 07:00:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:00:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000040)) 07:00:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:58 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) fsync(r1) 07:00:58 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000001, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000240)) 07:00:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r1, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 07:00:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x0) 07:00:59 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x194}}, 0x0) 07:00:59 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x6, 0x0, 0xfed7) socket$inet6_tcp(0xa, 0x1, 0x0) 07:00:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, "6a067d20ce12c61253387e5eb33cc664c55182"}) 07:00:59 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 07:00:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:00:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:00:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='B', 0x1, 0x20000000, &(0x7f0000000180)=@abs, 0x6e) 07:01:00 executing program 3: capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000440)) r0 = semget$private(0x0, 0x8, 0x0) semctl$GETPID(r0, 0x0, 0xb, 0x0) 07:01:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000005000)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) sendto$unix(r1, 0x0, 0x0, 0x80020003ffc, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r0, &(0x7f0000007800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:01:00 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4004000) 07:01:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) tkill(r1, 0x1000000000016) 07:01:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) r2 = gettid() socket(0x2, 0xa, 0x0) tkill(r2, 0x1000000000016) 07:01:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x15) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)=0xffffffffffffff29) 07:01:01 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001640)='/dev/autofs\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 07:01:01 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = ioctl$NS_GET_PARENT(r0, 0x5421, 0x748000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x5451, 0x0) 07:01:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(r0, 0x406, 0x0) 07:01:01 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:01:01 executing program 5: r0 = socket(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 07:01:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x5450, 0x0) 07:01:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5421, &(0x7f0000000180)={0x0, @can, @isdn}) 07:01:02 executing program 0: r0 = eventfd2(0x0, 0x0) close(r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:01:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002300)={0xffffffffffffffff}) write$binfmt_elf32(r0, 0x0, 0x0) 07:01:02 executing program 1: r0 = eventfd(0x0) close(r0) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000040)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:01:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_SET_FD(r1, 0x5450, r0) 07:01:02 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0x0) read$char_usb(r0, 0x0, 0x0) 07:01:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) dup2(r1, r0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 07:01:02 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 07:01:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttyS3\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) [ 1938.181594][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:01:03 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x2, &(0x7f0000000080)={0x3, 'bond_slave_0\x00'}) 07:01:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) write$char_usb(r1, 0x0, 0x0) 07:01:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:03 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) 07:01:03 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 07:01:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000680)={@dev}, 0x14) 07:01:04 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) 07:01:04 executing program 2: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0) 07:01:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 07:01:04 executing program 5: r0 = socket(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003840)={0x0}}, 0x0) 07:01:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20048001) 07:01:04 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) connect$unix(r3, &(0x7f0000000280)=@file={0x87b1e0cb6083eee3, './file0\x00'}, 0x6e) 07:01:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:05 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:01:05 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r2 = socket$inet6(0xa, 0x3, 0x7ff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x1, 0x7a, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @local, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x8d, 0x3, 0xf, [{@broadcast, 0x329b}, {@rand_addr=0x64010102, 0x20}, {@local, 0x2}, {@loopback, 0x1}, {@loopback, 0xffffffff}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000500)={@mcast2, @empty, @local, 0x1, 0x8, 0xfff, 0x0, 0x3, 0x44090024, r3}) r4 = socket(0x11, 0x2, 0x81) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x700, 0x10, 0x20, 0x0, {{0x2e, 0x4, 0x3, 0x38, 0xb8, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x4c, 0x23, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x41}}, {@local, 0x6d220000}, {@multicast2, 0x8}, {@local, 0x1000}, {@empty, 0x8}, {@multicast1, 0x3}, {@loopback, 0xfff}, {@private=0xa010100, 0x7}, {@broadcast, 0x1000}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x0, 0x7, "41d5883e37"}, {0x6, 0x12, "14d1b1b6c160433f9cad239ff9bcd22f"}, {0x0, 0x7, "f7947824f5"}, {0x2, 0x7, "7757b3ddb5"}, {0x5, 0xe, "2612742a4df41eb0afa1024a"}, {0x0, 0x5, "3ef4d1"}, {0x2, 0x12, "4a118360d261c1c5964344318aa29715"}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 07:01:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$P9_RMKNOD(r2, 0x0, 0x0) 07:01:05 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 07:01:05 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x5450, 0x0) 07:01:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 07:01:05 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x840, 0x6) 07:01:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:01:06 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) write$nbd(r0, &(0x7f0000000180), 0x10) 07:01:06 executing program 3: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_int(r0, 0x29, 0x4b, 0x0, 0x260) 07:01:06 executing program 2: setrlimit(0x7, &(0x7f0000000280)) sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 07:01:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) 07:01:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') write$P9_RSYMLINK(r0, 0x0, 0x0) 07:01:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff84}, 0x0) 07:01:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x0) 07:01:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000015c0)) 07:01:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x4008000) 07:01:07 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:01:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 07:01:08 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, 0x0) [ 1942.686771][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:01:08 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:01:08 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:01:08 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 07:01:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2c044045) 07:01:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:01:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 07:01:08 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:09 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) 07:01:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = dup(r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)) 07:01:10 executing program 4: r0 = memfd_create(&(0x7f0000000bc0)='\x00', 0x0) ioctl$EVIOCGKEY(r0, 0x5451, 0x0) 07:01:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, 0x0) 07:01:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x21, 0x0, &(0x7f0000000080)) 07:01:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 07:01:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4c000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:01:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180), 0x67) 07:01:10 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xd1, &(0x7f0000000180)={0x0}}, 0x0) 07:01:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:01:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000140)=""/136) 07:01:11 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x92b5bf122068b540) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x1076418e60cc31eb) 07:01:11 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) 07:01:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b80)={&(0x7f0000000000), 0xc, &(0x7f0000000b40)={0x0}}, 0x0) connect$netlink(r1, &(0x7f0000000180)=@unspec, 0xc) 07:01:11 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZGET(r0, 0x5451, 0x0) 07:01:11 executing program 1: r0 = memfd_create(&(0x7f0000000040)='procem1}(\'$\x00', 0x0) write$nbd(r0, 0x0, 0x0) 07:01:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x5421, &(0x7f0000000080)={@rand_addr=' \x01\x00'}) 07:01:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) write$P9_RXATTRCREATE(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) 07:01:12 executing program 5: r0 = inotify_init1(0x0) fcntl$notify(r0, 0x402, 0x0) 07:01:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x16, 0x0, &(0x7f0000000340)) 07:01:12 executing program 2: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000180)) 07:01:12 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RSETATTR(r0, 0x0, 0x0) 07:01:12 executing program 0: prctl$PR_SET_DUMPABLE(0x23, 0x0) 07:01:12 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 07:01:13 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 07:01:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 07:01:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) r2 = dup2(r0, r1) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x4010) 07:01:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:01:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 07:01:13 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:01:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 07:01:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, &(0x7f0000000080)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}, 0x744000) 07:01:13 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={0x0}}, 0x0) 07:01:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) write$char_usb(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket(0xa, 0x2, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 07:01:14 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 07:01:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x181c}}, 0x44040) 07:01:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 07:01:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:01:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x5450, 0x0) 07:01:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendto$unix(r1, 0x0, 0x2b4, 0x80020003ffc, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:01:14 executing program 1: r0 = timerfd_create(0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000e40)={@loopback, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000e80)=0x20) 07:01:14 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 07:01:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x204) dup2(r0, r1) write$P9_RFLUSH(r1, 0x0, 0x0) 07:01:15 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x5450, 0x0) 07:01:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 07:01:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000814) 07:01:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$P9_RWRITE(r0, 0x0, 0x0) 07:01:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 07:01:16 executing program 1: timer_create(0x3, 0x0, &(0x7f0000001240)) 07:01:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:01:17 executing program 0: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:01:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000000)=""/11, 0x1049a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)) 07:01:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x29, 0x46, 0x0, 0xfec3) 07:01:17 executing program 1: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) 07:01:17 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x1}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:01:17 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000040)='.\x00', 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 07:01:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:01:18 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:18 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) close(r0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0) 07:01:18 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 07:01:18 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:18 executing program 5: r0 = inotify_init1(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) 07:01:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x5451, 0x0) 07:01:18 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000001c0)) 07:01:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4800) 07:01:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) write$eventfd(r2, 0x0, 0x0) 07:01:19 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:01:19 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) dup3(r2, r0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000001c0)) 07:01:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x5450, 0x0) 07:01:19 executing program 3: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x260b357cf18fbd5d) 07:01:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) 07:01:20 executing program 0: sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) 07:01:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:01:20 executing program 2: r0 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x2c1) connect$inet6(r1, &(0x7f00000000c0), 0x1a) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x7, 0x0, 0x0) 07:01:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x200000100000001, 0x1eb) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:01:20 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendto$packet(r0, &(0x7f0000000040), 0x0, 0x40000d0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 07:01:20 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8903, &(0x7f0000000080)) 07:01:20 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcs\x00', 0x0, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000001000), 0x4) 07:01:21 executing program 3: r0 = memfd_create(&(0x7f0000001440)='/dev/full\x00', 0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:01:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGSKNS(r0, 0x5450, 0x0) 07:01:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) 07:01:21 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 07:01:27 executing program 1: modify_ldt$read_default(0x2, &(0x7f0000000000), 0x0) 07:01:27 executing program 4: r0 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f000000db00)={0x0, 0x0, &(0x7f000000dac0)={0x0}}, 0x0) 07:01:27 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 07:01:27 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:01:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 07:01:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}}, 0x0) 07:01:27 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002240)='/dev/autofs\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) 07:01:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4) 07:01:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x40) 07:01:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x174}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 07:01:28 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0x5450, 0x0) 07:01:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000081) close(r2) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1001000000000016) 07:01:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x74d}, 0x1c}}, 0x0) dup3(r0, r2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 07:01:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x5) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0xffff) 07:01:28 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:01:29 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000040)="b4fcfbf6e50203f3096b69aa6d1801c7ed88321366d074314581febd90de69c9c3a9b48275e971a6359c81f2f9c8478c22c2e27c4573e438e8b73b9a1afdbccf43389c55eaad4dd35dc3af94cb3a91ce2a907c0688b30066a0c7a3965bc568ea227805f96b2b37bf6022351c744d389732f8e7099a51ba9484813b140ba7c6eaf866a7584a059f7871d5c5ad71d942a400"/157, 0x2f, 0xa044804, 0x0, 0x44) 07:01:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20018040, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = gettid() tkill(r2, 0x16) 07:01:29 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TCSETXF(r0, 0x5451, 0x0) 07:01:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x14, &(0x7f00000059c0)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 07:01:29 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)) 07:01:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 07:01:30 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0x5451, 0x0) 07:01:30 executing program 3: r0 = inotify_init1(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:01:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$CHAR_RAW_REPORTZONE(r2, 0xc0101282, 0x0) 07:01:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x5452, &(0x7f0000000000)) 07:01:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000900)={&(0x7f0000000040), 0xc, &(0x7f00000008c0)={0x0}}, 0x20008082) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:01:31 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$KDADDIO(r0, 0x540b, 0x0) 07:01:31 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, &(0x7f00000000c0), 0x0, 0x4000000) 07:01:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 07:01:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) bind$inet6(r1, &(0x7f0000000040), 0x1c) 07:01:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x5428, 0x0) 07:01:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TCSBRK(r1, 0x5409, 0x0) 07:01:31 executing program 4: semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000000)=""/8) 07:01:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 07:01:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:01:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) 07:01:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0x4a, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x58}}, 0x0) 07:01:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='mime_typeeth0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x0) fcntl$setlease(r1, 0x400, 0x0) 07:01:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window, @mss, @mss, @mss], 0x4) 07:01:32 executing program 5: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 07:01:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0xc0) 07:01:34 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) dup2(r0, r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 07:01:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0x0) r2 = dup2(r0, r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:01:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000140)) 07:01:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 07:01:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7fffffff}, 0x1c) tkill(r1, 0x1000000000016) 07:01:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x0) 07:01:35 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) 07:01:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8903, &(0x7f0000000080)={0x1, 'vlan1\x00'}) 07:01:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x5608, &(0x7f0000000000)) 07:01:36 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 07:01:36 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) 07:01:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffe8b) 07:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x4) tkill(r2, 0x1000000000015) 07:01:36 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) memfd_create(&(0x7f0000000000)='posix_acl_access\x00', 0x0) write$P9_RLINK(r0, 0x0, 0x0) 07:01:36 executing program 0: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f000009c000)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 07:01:36 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x5451, 0x0) 07:01:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) dup2(r0, r1) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) 07:01:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={0x0}}, 0x0) 07:01:37 executing program 4: r0 = eventfd(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:01:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x5452, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @remote}}) 07:01:37 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bind$unix(r0, &(0x7f0000000ac0)=@abs={0x1}, 0x6e) 07:01:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSCTTY(r1, 0x541b, 0x20002001) 07:01:38 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) fchmod(r0, 0x0) 07:01:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:01:38 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r2, 0x301, 0x0) 07:01:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$BLKTRACETEARDOWN(r1, 0x5450, 0x0) 07:01:38 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000ac0), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000ac0), 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040000) 07:01:38 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, 0x0, &(0x7f0000000340)) 07:01:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x802140, 0x0) fcntl$setown(r0, 0x8, 0x0) 07:01:38 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200, 0x0) 07:01:38 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000000)) 07:01:39 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x12, 0x0, 0x0) 07:01:39 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x401, 0x0) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 07:01:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f0000000080)) 07:01:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x123ec2, 0x146) 07:01:40 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 07:01:40 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 07:01:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:01:40 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) 07:01:40 executing program 2: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:01:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000804) 07:01:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004100)) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) 07:01:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x5450, 0x0) 07:01:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:01:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r0, r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:01:41 executing program 0: r0 = socket(0x10, 0x2, 0x2) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:41 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:01:41 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:01:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) 07:01:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:01:41 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000000000)) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000140)='./file0/../file0\x00', 0x0) 07:01:41 executing program 0: r0 = eventfd2(0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 07:01:42 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 07:01:42 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x5421, &(0x7f0000000040)) 07:01:42 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r2, r3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 07:01:42 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x890c, &(0x7f0000000180)={'veth0_vlan\x00'}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 07:01:42 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:01:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x5451, 0x0) 07:01:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp], 0x2112) 07:01:43 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = dup2(r0, r1) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:01:43 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4010) 07:01:43 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) write$P9_RLERRORu(r0, 0x0, 0x0) 07:01:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5451, 0x0) 07:01:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000027c0)=0x80) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) 07:01:43 executing program 5: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) 07:01:44 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) 07:01:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) write$P9_RREMOVE(r1, 0x0, 0x0) 07:01:44 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) 07:01:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:01:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}}, 0x0) 07:01:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x20000014) 07:01:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0) dup2(r0, r1) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000400)) 07:01:45 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r0, 0x5452, &(0x7f00000000c0)) 07:01:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, 0x0) 07:01:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x44000) 07:01:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 07:01:45 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) 07:01:45 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x2, &(0x7f0000000080)) 07:01:46 executing program 3: splice(0xffffffffffffff9c, &(0x7f0000000040), 0xffffffffffffff9c, 0x0, 0x0, 0x1) 07:01:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:01:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffc1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r1, 0x0, 0x0) 07:01:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r3) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 07:01:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:01:46 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 07:01:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:47 executing program 5: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x5452, &(0x7f00000000c0)) 07:01:47 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, &(0x7f0000000140)={0x0}}, 0x0) 07:01:47 executing program 4: r0 = eventfd(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:01:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x52d, 0x0) pread64(r0, 0x0, 0x0, 0x0) 07:01:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 07:01:48 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) signalfd(r1, &(0x7f0000000040), 0x8) 07:01:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x540d, 0x0) dup2(r0, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x540d, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "caafab9ccebafe85c74f310d5f207877c767fe"}) 07:01:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8980, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x5451, 0x0) 07:01:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x5450, 0x0) 07:01:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 07:01:48 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 07:01:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CHAR_RAW_RRPART(r0, 0x125f, 0x0) 07:01:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000080)="28a2d0662dd8a9efefb8e76e44ad904feaaf20729c7198ec0fc3a858e323b421db3e4a6373326d95e52bfd377ac7f7ca485b7a5d965927815cead3644d094cbc2d0498e3c0424d64c0b015e507a5608891c1c1d189435f982bcaece9e5b59489b96737c7470a3ea81a6e665d", 0x0, 0x800, 0x0, 0xfffffffffffffc6b) 07:01:48 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r1, r0) bind(r0, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80) 07:01:48 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 07:01:48 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp\x00') ioctl$EVIOCGKEY(r0, 0x5451, 0x0) 07:01:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$FITRIM(r1, 0x5452, &(0x7f00000000c0)) 07:01:49 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x80041, 0x0) ioctl$KDSETMODE(r0, 0x5452, 0x2071dfff) 07:01:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={0x0}}, 0x0) 07:01:49 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:01:49 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 07:01:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:49 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) 07:01:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x39, 0x0, 0x0) 07:01:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x5450, 0x0) 07:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 07:01:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) 07:01:51 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x5411, &(0x7f0000000040)={'erspan0\x00', 0x0}) 07:01:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) r2 = gettid() r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) tkill(r2, 0x1000000000016) 07:01:51 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r0, r1) write$P9_RSTATFS(r1, 0x0, 0x0) 07:01:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) write$vga_arbiter(r1, 0x0, 0x0) 07:01:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 07:01:51 executing program 4: r0 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x2c1) connect$inet6(r1, &(0x7f00000000c0), 0x1a) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev}, 0x0, @in=@local}}, 0xe8) 07:01:51 executing program 0: r0 = epoll_create(0x800) ioctl$BTRFS_IOC_SYNC(r0, 0x5450, 0x0) 07:01:51 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0x4) 07:01:51 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) 07:01:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 07:01:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x31, 0x0, &(0x7f0000000080)) 07:01:52 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 07:01:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:01:52 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:01:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x4041004) 07:01:52 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x5450, 0x0) 07:01:52 executing program 4: semget(0x3, 0x0, 0x19) 07:01:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040000) 07:01:53 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 07:01:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) read(r1, &(0x7f0000000000)=""/6, 0x6) 07:01:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) close(r0) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x6) 07:01:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) 07:01:53 executing program 4: r0 = socket(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:01:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0xd, &(0x7f0000000f40)="01", 0x1) 07:01:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) mprotect(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x0) 07:01:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:01:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000040)="cd", 0x1, 0xc0, 0x0, 0x0) 07:01:54 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0x8000000007) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 07:01:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, 0x0, 0x190}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:01:55 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5452, &(0x7f00000003c0)) 07:01:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) 07:01:55 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:01:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000081) 07:01:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) mprotect(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x0) 07:01:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) 07:01:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000027c0)={0x0, 0xfffffef3}}, 0x0) 07:01:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x4800) 07:01:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) mprotect(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x0) 07:01:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:01:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5452, &(0x7f0000000180)) 07:01:58 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 07:01:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) 07:01:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 07:01:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 07:01:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() tkill(r2, 0x1000000000016) 07:02:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) mprotect(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x0) 07:02:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:02:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 07:02:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init() dup2(r0, r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 07:02:00 executing program 2: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:02:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$unix(r2, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 07:02:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 07:02:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4b36, 0x0) 07:02:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x6) dup2(r0, r1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)) 07:02:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:02:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) mprotect(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x0) 07:02:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000001080)='./file0\x00', 0x40040, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8000) 07:02:02 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$KDSKBENT(r0, 0x5425, 0x0) 07:02:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 07:02:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x74, 0xffffff7f}, 0x200000cc, &(0x7f0000000340)={0x0}}, 0x0) 07:02:02 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x7, 0x0, 0x0) 07:02:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0xf) dup3(r1, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 07:02:04 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @random="1d7dd77daa3e"}, 0x10) 07:02:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80004508, 0x0) 07:02:04 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'veth0_macvtap\x00'}) 07:02:04 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x11, 0x0, &(0x7f0000000200)) [ 1999.113192][ T2797] device lo entered promiscuous mode [ 1999.141085][ T2794] device lo left promiscuous mode 07:02:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) write$binfmt_elf32(r1, 0x0, 0x0) 07:02:04 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 07:02:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$CHAR_RAW_SECDISCARD(r1, 0x127d, 0x0) 07:02:04 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:02:05 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 07:02:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x0) 07:02:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 07:02:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x890c, &(0x7f0000000000)={0x0, 0x2, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 07:02:05 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x541b, 0x960000) 07:02:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0xffff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x5451, 0x0) 07:02:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:02:05 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:06 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 07:02:06 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x5451, 0x0) 07:02:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() tkill(r2, 0x401004000000016) 07:02:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) 07:02:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1899c2, 0x0) write(r0, 0x0, 0x0) 07:02:06 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 07:02:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x5450, 0x0) 07:02:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f00000007c0)) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000018000000000caec0000000000000006"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) 07:02:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:02:07 executing program 5: r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f\x85\x8d\xb0\x91@]o\x89Fc\xd8c\xd2b\\e\xdb\xc9\xa9\xfe\x06*\xe3\xfb\xc2\x11\"}\x94\xa7\xe1\xbaA\x92y\x93^\xef\xfd\x9c\xa0\xeb\x9e\x06\xb2\xa1V\xaf\xf4\x8d\x97y\xff\xa0\xa7\r\x84\x15\xdf\xf4\xbf\xe0w\x01m\xcf\xe4\xd0\x0f\xf4[\xb7S\x81\x9e\xcb\x83\x13\xd7D\x83TM\x18\x10n\xdd\x89^\xd3\xed\x99\v\x11\x8b\xcb\xeb\xa6\xca\x86Gn/C\x95\xa8\xe5&\x81\xba\x04\xe9Y\x13I\xf8\x8e\xc2A\xaf6[\xa4\xcc\x16.\xffv\xbd^\xbc\xdd\xdc\xee\xb8Z$\xdeIj\x92\xb8t6\x8dU\xd1\x82\n\xfbo\xd3\x11e\xd2\xf6\xc3Ep\xc5\xc0\xf8\r!\xdd\x14\x11dH3\xeb\xf2\xc3\xe7', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0xfa3) chroot(&(0x7f0000000000)='./file0\x00') getgid() setgid(0x0) getgid() setgid(0x0) getgid() 07:02:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$EVIOCGID(r0, 0x40044590, 0x0) mprotect(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x0) 07:02:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000002c40)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4088090) 07:02:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) 07:02:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) 07:02:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:02:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = dup(r1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) 07:02:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) 07:02:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) 07:02:10 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r1, r0) write$binfmt_elf32(r0, 0x0, 0x0) 07:02:10 executing program 5: r0 = socket(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0xa}, &(0x7f0000000080)=0x20) 07:02:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:02:12 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454ca, 0x400000) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 07:02:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) 07:02:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) write$vga_arbiter(r0, 0x0, 0x0) 07:02:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/80) 07:02:12 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f0000000080)) 07:02:12 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x3, 0x0) chroot(&(0x7f0000000200)='./file0\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x101040, 0x0) 07:02:12 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x0) 07:02:12 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5428) 07:02:13 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) delete_module(0x0, 0x0) 07:02:13 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x23, &(0x7f00000000c0)={0x0}}, 0x0) 07:02:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:02:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) flistxattr(r0, 0x0, 0x0) 07:02:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) dup2(r1, r0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}}}, 0x90) 07:02:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 07:02:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x723c, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:02:14 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 07:02:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x29f) 07:02:14 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) 07:02:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 07:02:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 07:02:15 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0xc0189436, 0x0) 07:02:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00000acaffffe00000f69c61fc3ba106a200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 07:02:15 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:02:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000480)={0x0, "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"}) 07:02:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0xc84dd59) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:02:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001580)='/proc/self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 07:02:16 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) write$P9_RMKNOD(r1, 0x0, 0x0) 07:02:16 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) 07:02:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8084) 07:02:16 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5451) 07:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x10e, 0x5, 0x0, 0x0) 07:02:17 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 07:02:17 executing program 0: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 07:02:17 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f0000000440)) 07:02:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:02:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)) 07:02:17 executing program 5: r0 = inotify_init() close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 07:02:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r1, 0x1000000000016) 07:02:18 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x21d, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf}, 0xf) recvfrom(r0, 0x0, 0x291, 0x2000, 0x0, 0x47) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 07:02:18 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5450, 0x0) 07:02:18 executing program 1: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0xee75321fcb91ccd6) 07:02:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r0, 0x1, 0x24, 0x0, &(0x7f00000013c0)) 07:02:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 07:02:18 executing program 0: sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x11207dbb8677ffcd) 07:02:19 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5452, &(0x7f00000001c0)) 07:02:19 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 07:02:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x10, 0x0, 0x0) 07:02:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0x0) 07:02:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDISABIO(r0, 0x5608) 07:02:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010002, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4c}}, 0x20004008) 07:02:19 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') close(r0) socket$packet(0x11, 0x3, 0x300) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000040)) 07:02:19 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x80041, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5421, &(0x7f00000002c0)) 07:02:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4004080) connect$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 07:02:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDGETENTCNT(r0, 0x5452, &(0x7f0000000200)) 07:02:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8044) 07:02:20 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:21 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:02:21 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x14, 0x0, 0x0) 07:02:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8011) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) tkill(r2, 0x1000000000016) 07:02:21 executing program 3: r0 = eventfd(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:02:21 executing program 5: r0 = socket(0x1, 0x5, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:02:21 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380), 0x4) socket$packet(0x11, 0x0, 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0xffff}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000100)) 07:02:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x807, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5450, 0x0) 07:02:22 executing program 4: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf4491a0232f53cc3, 0x2032, 0xffffffffffffffff, 0x0) 07:02:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() tkill(r2, 0x1000000000016) 07:02:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001400), 0x8) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:02:22 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) 07:02:22 executing program 1: r0 = epoll_create1(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:22 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x5421, &(0x7f00000000c0)) 07:02:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 07:02:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:02:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40000) 07:02:23 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280), 0x4) 07:02:23 executing program 1: r0 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/252) 07:02:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect(r0, &(0x7f0000000200)=@hci, 0x80) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) recvmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/132, 0x84}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r2, 0x0) 07:02:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x9, &(0x7f0000000000)=@gcm_128={{}, "0bd28ef022ad17d3", "1492c09d2b95ef237097e7bb19b1649b", "7177e6bb", "7a426b8d05fc7016"}, 0x28) 07:02:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() tkill(r2, 0x13) 07:02:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r1, r2) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:02:23 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000001900)='./file1\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40000) 07:02:24 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) 07:02:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VT_GETMODE(r1, 0x540c, 0x0) 07:02:24 executing program 2: r0 = inotify_init1(0x0) ioctl$EVIOCSREP(r0, 0x5450, 0x0) 07:02:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 07:02:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) getsockname$inet(r0, 0x0, &(0x7f000000dc00)) 07:02:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x17, &(0x7f0000000380)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "00e40000000000000003000c0000001000000000000000e5ffff00000000000000000000000000000000000000000000bd0000ce0000000000000000000000000000008000"}, 0xd8) 07:02:25 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:02:25 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, 0x0, 0x0) 07:02:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7}, 0xfffffe9f) write$P9_RREAD(r2, &(0x7f0000000380)={0xb}, 0xb) dup3(r2, r1, 0x0) 07:02:25 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:02:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 07:02:25 executing program 3: r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4) 07:02:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000140)) 07:02:26 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x29, 0xfffffffffffffffe, 0x44b3ef32) 07:02:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 07:02:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:02:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 07:02:26 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5451, 0x0) 07:02:26 executing program 3: mkdir(&(0x7f0000000900)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x2, &(0x7f0000002080)) 07:02:26 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RMKDIR(r2, 0x0, 0x0) 07:02:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:02:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:02:27 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 07:02:27 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r2, r3, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000001c0)) 07:02:27 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 07:02:27 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x5450, 0x0) 07:02:27 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup(r0) write$cgroup_type(r1, 0x0, 0xfffffdeb) 07:02:27 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:02:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x26, 0x0) 07:02:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) dup2(r0, r1) write$P9_RSTATu(r1, 0x0, 0x0) 07:02:28 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r2, r3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00000002c0)=""/25, &(0x7f0000000300)=0x19) 07:02:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) 07:02:28 executing program 3: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_int(r0, 0x29, 0x2, 0x0, 0x40) 07:02:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) 07:02:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:02:28 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 07:02:29 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 07:02:29 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setflags(r0, 0x6, 0x0) 07:02:29 executing program 5: mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xf) 07:02:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 07:02:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$CHAR_RAW_ROGET(r0, 0x125e, 0x0) 07:02:31 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r3, r4, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) 07:02:31 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 07:02:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4081) 07:02:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:02:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 07:02:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x39, 0x0, 0x0) 07:02:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, 0x0, &(0x7f0000000040)) 07:02:32 executing program 5: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r0, r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:02:32 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:02:32 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) ioctl$EVIOCSREP(r0, 0x5450, 0x0) 07:02:32 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 07:02:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd(0x0) dup3(r0, r1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000035c0)) 07:02:33 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x123501, 0x0) write$9p(r0, 0x0, 0x0) 07:02:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5450, 0x0) 07:02:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x540d, 0x0) dup2(r0, r2) readv(r2, 0x0, 0x0) 07:02:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 07:02:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0xd0}}, 0x0) 07:02:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 07:02:33 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) 07:02:33 executing program 4: r0 = eventfd(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:34 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:02:34 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x5452, &(0x7f0000000000)=@generic) 07:02:34 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 07:02:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0xffffff41}}, 0x0) 07:02:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x42) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_IOMIN(r1, 0x1278, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:02:35 executing program 5: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:41 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 07:02:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') dup2(r0, r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 07:02:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r1, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x402) dup2(r0, r2) setsockopt$inet_tcp_buf(r2, 0x6, 0x9, &(0x7f0000000140)="c2eb6ba5", 0x4) 07:02:41 executing program 5: r0 = inotify_init1(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:02:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x80) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 07:02:41 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) 07:02:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 07:02:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) tkill(r1, 0x1000000000016) 07:02:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 07:02:42 executing program 1: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = dup2(r0, r0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) tkill(r1, 0x1004000000013) 07:02:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 07:02:42 executing program 2: r0 = timerfd_create(0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="0001000000000000c20400000000f7740000000000000000"], 0x18) recvmsg(r1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:02:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 07:02:43 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101001, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 07:02:43 executing program 5: r0 = socket(0x2000000100000010, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)="0484164a", 0x14, 0x2008090, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x0) 07:02:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 07:02:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:02:43 executing program 2: sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) 07:02:43 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_aout(r0, 0x0, 0x0) 07:02:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:02:44 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x81, 0x0) write$eventfd(r0, 0x0, 0x3a) 07:02:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) 07:02:44 executing program 3: r0 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:02:44 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000004880), 0x50, 0x6) 07:02:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)) 07:02:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r1, r2) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) 07:02:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000010) 07:02:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x5450, 0x0) 07:02:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8912, &(0x7f0000000080)={'caif0\x00', {0x2, 0x0, @multicast2}}) 07:02:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)) 07:02:45 executing program 2: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffffffff, 0x441) 07:02:45 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 07:02:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 07:02:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000500)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000c81) close(r2) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 07:02:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:02:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKSECTGET(r1, 0x1267, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:02:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 07:02:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') dup2(r0, r1) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x6, 0x0, 0x0) 07:02:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 07:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 07:02:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) r2 = dup(r0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@jumbo, @padn]}, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 07:02:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 07:02:47 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:02:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) close(r0) socket(0x2, 0xa, 0x0) tkill(r1, 0x1000000000016) 07:02:47 executing program 5: pipe2(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0x0) 07:02:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001840)=0x80) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 07:02:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0xffff, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:02:47 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 07:02:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) dup3(r0, r3, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 07:02:48 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x541b, &(0x7f0000000040)) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) creat(0x0, 0x0) 07:02:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x4188e86abf1ca3b2) write$P9_RMKNOD(r0, &(0x7f0000000540)={0x14}, 0x14) 07:02:52 executing program 2: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)) 07:02:52 executing program 0: r0 = memfd_create(&(0x7f0000000040)='On\xc4\xd0\xee\x127\xd8\xa2\x8a\x80Tc-\xfe9%\x14\x95d;\xe6\xe8\xad.$\xc4\xb8\xa8\xa96\x0e\xebi6\x9e\xbd\x8b\xb9^B{\x8d\xa0\xdf\xbc\x02l\xb8\x84Q\\\r\xc5\xb5(\xd1\xf7\xf7\xc2\xc0\xef\xee6X;I\xd6\xc2\xf9\xfcS\xb1\xdbKth\x1eh\x1f\r\x92\xf7\x1c\x15\xebU\x99\xeb\xfdu\xfc\x03p\xe5\xb0\xaf\x81\x00'/109, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000000c0)) 07:02:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000140)) 07:02:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x181101, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 07:02:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:02:53 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b37) 07:02:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 07:02:53 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000080)=0x20) 07:02:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xffffffffffffff2c) 07:02:53 executing program 5: r0 = inotify_init1(0x0) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:02:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 07:02:53 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFLAGS(r0, 0x5421, &(0x7f0000000080)) 07:02:54 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) close(r0) socket(0x100000000011, 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 07:02:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) write$P9_RREADLINK(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r2) tkill(r1, 0x1000000000016) 07:02:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffffca, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x61}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)={@rand_addr=' \x01\x00', @remote, @ipv4={[], [], @dev}}) tkill(r2, 0x1000000000016) 07:02:54 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000140), 0x4) 07:02:54 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0) 07:02:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') close(r0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@remote, @broadcast, r2}, 0xc) 07:02:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4048040) 07:02:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "b286eb6d50cd4cfdc5c235c00bb55102aabee6"}) 07:02:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) tkill(r1, 0x401004000000016) 07:02:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 07:02:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, 0x0) 07:02:55 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x8000) 07:02:55 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x1ae) 07:02:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xc, 0x0, 0x0) 07:02:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8902, &(0x7f0000000000)={'macvlan0\x00', {0x2, 0x0, @local}}) 07:02:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 07:02:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) dup2(r0, r1) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x5603, &(0x7f0000000040)={0x3}) 07:02:56 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002440)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:02:56 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0xfa4672a1b2883b36, 0x0) dup2(r1, r0) write$binfmt_misc(r0, 0x0, 0x0) 07:02:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x10000000040040, 0x0) dup3(r0, r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5452, &(0x7f0000002100)={{}, "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"}) 07:03:01 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x5451, 0x0) 07:03:01 executing program 5: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x2) fcntl$addseals(r0, 0x409, 0xf) 07:03:01 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:03:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 07:03:01 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 07:03:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x406) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 07:03:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8903, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0xfffffffffffffe98, 0x0, 0x1eb, 0x0, 0x0}) 07:03:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$P9_RREMOVE(r0, 0x0, 0x0) 07:03:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:03:02 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 07:03:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) 07:03:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={0x0}}, 0x20000000) 07:03:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000000) 07:03:03 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 07:03:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004) 07:03:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "f65510f83217f142"}}]}, 0x20}}, 0x0) tkill(r2, 0x1000000000016) 07:03:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGKEYCODE(r0, 0x5421, &(0x7f0000000540)=""/150) 07:03:08 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 07:03:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000005c0)=0x80) dup2(r0, r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 07:03:08 executing program 2: msgget$private(0x0, 0x258) 07:03:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r1) getsockopt$inet6_int(r1, 0x29, 0x12, 0x0, &(0x7f0000001940)) 07:03:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) read(r0, &(0x7f0000000000), 0x0) 07:03:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RSTATFS(r2, 0x0, 0x0) close(r2) socket(0xa, 0x2, 0x0) tkill(r1, 0x16) 07:03:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x5450, 0x0) 07:03:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000018000000000caec0000000000000006"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 07:03:08 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x402c542b, &(0x7f0000000440)) 07:03:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) dup2(r0, r1) write$char_usb(r1, 0x0, 0x0) 07:03:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 07:03:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001580)='/proc/self/attr/exec\x00', 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000180)) 07:03:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r0, &(0x7f00000000c0)=""/145, 0x91) r2 = dup2(r1, r0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:03:10 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) dup3(r4, r1, 0x0) tkill(r0, 0x1004000000016) 07:03:10 executing program 2: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:03:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) creat(&(0x7f0000000480)='./file0\x00', 0x0) ftruncate(r0, 0x0) 07:03:10 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x40000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept4$packet(r1, 0x0, 0x0, 0x0) fcntl$getflags(r2, 0x0) 07:03:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 07:03:11 executing program 2: mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ffb000/0x1000)=nil) 07:03:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) tkill(r2, 0x1000000000016) 07:03:11 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000010) 07:03:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:11 executing program 2: r0 = socket(0x10, 0x802, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20040884, 0x0, 0xfffffffffffffd9e) 07:03:11 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 07:03:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket(0xa, 0x3, 0x1f) r2 = gettid() tkill(r2, 0x1000000000016) 07:03:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:03:12 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 07:03:12 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 07:03:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:03:13 executing program 4: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) write$vga_arbiter(r2, 0x0, 0x0) 07:03:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={0x0, 0xbb, &(0x7f0000000200)={0x0}}, 0x0) 07:03:13 executing program 3: r0 = socket(0x1, 0x2, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 07:03:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvfrom$inet(r0, &(0x7f0000000180)=""/3, 0x0, 0x40000022, 0x0, 0x59) 07:03:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0xd1) 07:03:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0xd, 0x0, &(0x7f00000003c0)) 07:03:14 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x109a81, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 07:03:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:03:14 executing program 3: capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:14 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 07:03:14 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x80) 07:03:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000080), 0x1c) dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000000000000072) 07:03:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) write$P9_RWSTAT(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = gettid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000016) 07:03:15 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, 0x0, 0x8) 07:03:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TIOCNXCL(r0, 0x5450) 07:03:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) dup2(r1, r0) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x5411, &(0x7f0000000040)={'tunl0\x00', 0x0}) 07:03:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) tkill(r2, 0x1000000000016) 07:03:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r0, 0x8901, &(0x7f0000000080)='netdevsim0\x00') 07:03:15 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) 07:03:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0xffffff9a) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340)='/dev/autofs\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 07:03:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) dup2(r0, r1) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000180)=0x7ff, 0x4) [ 2070.591672][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2070.672752][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:03:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000440)=0x400100000001, 0x4) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:03:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001580)='/proc/self/attr/exec\x00', 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) tkill(r1, 0x1000000000016) 07:03:16 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) write$cgroup_netprio_ifpriomap(r2, 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r0, 0x1000000000015) 07:03:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000a00)='/dev/vcs#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000003a80)=0x100000001, 0x4) connect(r0, &(0x7f00000006c0)=@un=@abs, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') sendfile(r0, r1, 0x0, 0x10000) 07:03:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x5452, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {}, 0x0, {0x2, 0x0, @remote}, 'sit0\x00'}) 07:03:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:17 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x5) write$P9_RATTACH(r1, 0x0, 0x0) 07:03:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001580)='/proc/self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:17 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4020) 07:03:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:18 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x400c085) 07:03:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) 07:03:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 07:03:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000804) 07:03:18 executing program 4: r0 = creat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0xfd1e) connect$inet6(r1, &(0x7f0000000100), 0x1c) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:03:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 07:03:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) dup3(r0, r1, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) 07:03:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x5450, 0x0) 07:03:19 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) fstatfs(r1, &(0x7f0000000180)=""/166) 07:03:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, 0x0) 07:03:19 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x5451, 0x0) 07:03:19 executing program 0: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:03:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x5450, 0x0) 07:03:19 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:03:20 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 07:03:20 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 07:03:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0xfffffffffffffe04}}], 0x1, 0x0) 07:03:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 07:03:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, 0x0, 0x0) 07:03:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x36, 0x0, 0x0) 07:03:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:03:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 07:03:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 07:03:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000003200)) 07:03:21 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) ioctl$EVIOCSKEYCODE(r0, 0x5421, &(0x7f00000002c0)) 07:03:21 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:03:21 executing program 4: sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) 07:03:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000740)={0x6, 'ip6erspan0\x00'}) 07:03:21 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:03:21 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 07:03:21 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', 0x22442, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) 07:03:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4004) 07:03:22 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x40, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) 07:03:22 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={0x0}}, 0x0) 07:03:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 07:03:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x3e, 0x0, 0x46) 07:03:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x5450, 0x0) 07:03:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGMTSLOTS(r0, 0x5421, &(0x7f00000001c0)=""/187) 07:03:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x6, 0x0, 0x0) 07:03:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000045) 07:03:23 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RREADLINK(r0, 0x0, 0x0) 07:03:23 executing program 0: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880)='net_prio.ifpriomap\x00', 0x2, 0x0) 07:03:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8907, 0x0) 07:03:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r4, r3, 0x0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) 07:03:23 executing program 4: r0 = eventfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 07:03:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 07:03:23 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:03:23 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 07:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000001100)=""/4101) ioctl$KDFONTOP_COPY(r0, 0x5608, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:03:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x35c, 0x20010003, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x194) write$9p(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 07:03:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) 07:03:24 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, r1/1000+30000}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = dup(r0) connect$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 07:03:24 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x5452, 0x400ffd) 07:03:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 07:03:24 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x4, 0x0, 0x0) 07:03:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0) 07:03:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd(0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:25 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x4c00, 0x0, 0x0) 07:03:25 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:03:25 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x4, 0x0, 0x0) 07:03:25 executing program 2: timerfd_create(0x9, 0x80000) 07:03:25 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 07:03:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:03:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x15, 0x0, &(0x7f0000000100)) 07:03:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 07:03:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDDELIO(r0, 0x4b35, 0x0) 07:03:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd(0x0) dup2(r0, r1) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:26 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffdc5) r2 = memfd_create(&(0x7f0000000080)='usernodev^procposix_acl_access](nodev\x00', 0x0) r3 = dup2(r1, r2) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) 07:03:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4048840) 07:03:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0) 07:03:27 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) getpeername$inet(r0, 0x0, 0x0) 07:03:27 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)) 07:03:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) write$evdev(r0, 0x0, 0x0) 07:03:28 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x102, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132441) r4 = fcntl$dupfd(r3, 0x0, r1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x24, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @initdev}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000000c0)='\\)*%@#!)-\xea\x00', 0xb, 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 07:03:28 executing program 0: r0 = memfd_create(&(0x7f0000000000)='wlan0(\x00', 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:03:28 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x3, 0x0, 0x0) 07:03:28 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:03:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0xc1) 07:03:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) 07:03:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4020000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 07:03:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r2, 0x1000000000016) 07:03:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) tkill(r2, 0x1000000000016) 07:03:33 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)) 07:03:33 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @timestamp, @timestamp], 0x4) 07:03:33 executing program 3: capset(&(0x7f0000002240)={0x20080522}, &(0x7f0000002280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 07:03:33 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 07:03:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') tkill(r2, 0x1000000000016) 07:03:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) tkill(r1, 0xb) 07:03:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 07:03:33 executing program 2: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80240, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) 07:03:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000001140)=ANY=[], 0x6c1) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 07:03:34 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 07:03:34 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:03:34 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$FIBMAP(r0, 0x5421, &(0x7f0000000000)) 07:03:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) write$binfmt_script(r1, 0x0, 0x0) 07:03:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8940, 0x0) 07:03:35 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "787467209df1dc8d717b907a29328efebbc038"}) 07:03:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 07:03:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x2cc01) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r1, 0x1000100000016) 07:03:40 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:03:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r2, r3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:03:40 executing program 2: r0 = eventfd2(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r1, 0x5450, r0) 07:03:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4000000, 0x0, 0x59) 07:03:40 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 07:03:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:03:40 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 07:03:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$packet_rx_ring(r1, 0x10e, 0x4, 0x0, 0x0) 07:03:40 executing program 5: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fcntl$setpipe(r0, 0x8, 0x0) 07:03:40 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 07:03:40 executing program 4: r0 = timerfd_create(0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 07:03:41 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x5452, &(0x7f00000000c0)) 07:03:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = dup(r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000004c0)=0x400000000063) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = syz_open_pts(r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)) 07:03:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008880) 07:03:41 executing program 3: r0 = socket(0x11, 0x8000a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'sit0\x00', {}, 0x90b}) 07:03:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20008804) 07:03:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCCBRK(r2, 0x5428) 07:03:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0}}, 0x0) 07:03:42 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) 07:03:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 07:03:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) write$nbd(r1, 0x0, 0x0) 07:03:42 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800c1, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 07:03:42 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 07:03:43 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 07:03:43 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000c40)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0}}, 0x0) 07:03:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="0001000000000000c2"], 0x18) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) r2 = dup(r1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r3 = dup3(r2, r0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)={0x0}}, 0x0) 07:03:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) creat(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7f}) 07:03:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) 07:03:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) ioctl$sock_netdev_private(r0, 0x890b, &(0x7f00000002c0)) 07:03:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80) write$P9_RVERSION(r1, 0x0, 0x0) 07:03:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xf) r2 = gettid() tkill(r2, 0x1000000000016) 07:03:44 executing program 1: capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x5000800}, 0xc, &(0x7f0000000640)={0x0}}, 0x0) 07:03:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2}}) 07:03:45 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) 07:03:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)) r1 = syz_open_pts(r0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x5450, 0x0) 07:03:45 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) 07:03:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f0000000080)) 07:03:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$unix(r1, 0x0, 0x0, 0x4008014, &(0x7f0000000140)=@abs, 0x6e) 07:03:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:03:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5421, &(0x7f0000000300)={"4511008900f30000525cad8a000800"}) 07:03:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f00000000c0)) 07:03:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 07:03:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x801) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 07:03:46 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 07:03:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) 07:03:46 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) 07:03:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 07:03:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 07:03:47 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) waitid$P_PIDFD(0x2, r0, 0x0, 0x8, 0x0) 07:03:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) 07:03:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000050) 07:03:47 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vcs\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 07:03:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000600)={0x0, 0x57, &(0x7f0000000040)={0x0, 0xffffff7a}}, 0x0) 07:03:47 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0xf, &(0x7f0000000140)) 07:03:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 07:03:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef2f030100000029c4645f000000000000000001007fffffff00000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000012c00)) 07:03:48 executing program 0: syz_mount_image$ufs(&(0x7f0000000040)='ufs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x801, &(0x7f0000000380)={[{}], [{@fowner_gt={'fowner>', 0xee00}}]}) 07:03:48 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) unshare(0x20000400) setsockopt(r0, 0x10d, 0x0, 0x0, 0x0) 07:03:48 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) [ 2103.084413][ T4680] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 2103.157364][ T4680] EXT4-fs (loop2): revision level too high, forcing read-only mode 07:03:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, r1, 0x1}, 0x14}}, 0x0) [ 2103.264921][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:03:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 07:03:48 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000180)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00), 0x1, 0x0) 07:03:48 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x12, 0x403, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x1}}}, 0x4c}}, 0x0) 07:03:48 executing program 0: unshare(0x4000400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 07:03:49 executing program 5: unshare(0x400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0xc0104320, 0x0) 07:03:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dea5fbb1c268110f6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c746571fffffffffff400000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) 07:03:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}]}, 0x3c}}, 0x0) 07:03:49 executing program 3: mmap(&(0x7f0000abb000/0x2000)=nil, 0x2000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) 07:03:49 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000b00)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x0, [[0x0, 0x7], [0x8], [0x1]], [], [], [], 0xad0}) 07:03:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0xa000400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 07:03:49 executing program 5: syz_usb_connect(0x0, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x77, 0x76, 0x8, 0x499, 0x1059, 0xaa68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdf, 0xdb, 0x29, 0x0, [@uac_as={[@format_type_ii_discrete={0x9}]}], [{{0x9, 0x5, 0xb8fc4d5e64cee785, 0x13, 0x40}}]}}]}}]}}, 0x0) 07:03:49 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 07:03:50 executing program 4: r0 = fsopen(&(0x7f0000000080)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r1) 07:03:50 executing program 3: mmap(&(0x7f0000abb000/0x2000)=nil, 0x2000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) 07:03:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/40, 0x5ba8) 07:03:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0xa000400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 07:03:50 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 2105.225890][ T9473] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2105.468269][ T9473] usb 6-1: Using ep0 maxpacket: 8 07:03:50 executing program 3: mmap(&(0x7f0000abb000/0x2000)=nil, 0x2000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) [ 2105.607058][ T9473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 07:03:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000000)={0x4, 0x0, '-\tT'}) [ 2105.787496][ T9473] usb 6-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice=aa.68 [ 2105.796979][ T9473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.805134][ T9473] usb 6-1: Product: syz [ 2105.809730][ T9473] usb 6-1: Manufacturer: syz [ 2105.814486][ T9473] usb 6-1: SerialNumber: syz 07:03:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000000000004000a000a000100726f757465000000200002"], 0x50}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720100bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001701000004000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000f87a38280a3cc7f67ee5af6ff25174"]}], 0x4924924924924b3, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2105.984779][ T9473] usb 6-1: config 0 descriptor?? 07:03:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0xc0002) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 07:03:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0xa000400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) [ 2106.387439][ T9473] usb 6-1: USB disconnect, device number 64 [ 2106.607837][ T4787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2106.758918][ T4795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2107.186264][ T9473] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2107.435636][ T9473] usb 6-1: Using ep0 maxpacket: 8 [ 2107.565939][ T9473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2107.765878][ T9473] usb 6-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice=aa.68 [ 2107.775087][ T9473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.783538][ T9473] usb 6-1: Product: syz [ 2107.788003][ T9473] usb 6-1: Manufacturer: syz [ 2107.792751][ T9473] usb 6-1: SerialNumber: syz [ 2107.859614][ T9473] usb 6-1: config 0 descriptor?? 07:03:53 executing program 5: capset(&(0x7f0000000580)={0x19980330}, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) 07:03:53 executing program 3: mmap(&(0x7f0000abb000/0x2000)=nil, 0x2000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) 07:03:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) unshare(0x400) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 07:03:53 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000), 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 07:03:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0xa000400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 07:03:53 executing program 0: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@ipv4_newroute={0x30, 0x18, 0x3, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x4}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x30}}, 0x0) [ 2107.915994][ T9473] usb 6-1: can't set config #0, error -71 [ 2107.987825][ T9473] usb 6-1: USB disconnect, device number 65 [ 2108.190533][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:03:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0xea60}}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 07:03:53 executing program 3: mmap(&(0x7f0000abb000/0x2000)=nil, 0x2000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) 07:03:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 07:03:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) unshare(0x400) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 07:03:53 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000200009400000002000000000000060000000014001680100002800c0001fb01ff2f00000000000600150006"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:03:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r0, &(0x7f0000000000)=""/24, 0x18, 0x1434000000000) 07:03:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 07:03:54 executing program 3: mmap(&(0x7f0000abb000/0x2000)=nil, 0x2000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) 07:03:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) unshare(0x400) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 07:03:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x38}}, 0x0) 07:03:55 executing program 3: mmap(&(0x7f0000abb000/0x2000)=nil, 0x2000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) 07:03:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000000)={'batadv0\x00'}) 07:03:55 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x480, 0x0, 0x0) 07:03:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) unshare(0x400) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 07:03:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 07:03:56 executing program 0: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b62278319fb10081cc2442181d64843ceeb4b4"}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e00678f", 0x8) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x200007ff}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2110.960659][ T4883] ===================================================== [ 2110.967912][ T4883] BUG: KMSAN: uninit-value in do_ip_vs_set_ctl+0x19c2/0x34a0 [ 2110.975342][ T4883] CPU: 0 PID: 4883 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 2110.983930][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.993992][ T4883] Call Trace: [ 2110.997302][ T4883] dump_stack+0x21c/0x280 [ 2111.001639][ T4883] kmsan_report+0xf7/0x1e0 [ 2111.006055][ T4883] __msan_warning+0x5f/0xa0 [ 2111.010581][ T4883] do_ip_vs_set_ctl+0x19c2/0x34a0 [ 2111.015623][ T4883] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2111.021768][ T4883] ? __perf_event_task_sched_in+0xad0/0xb40 [ 2111.027661][ T4883] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2111.033734][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.038958][ T4883] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2111.045025][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.050217][ T4883] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2111.056026][ T4883] ? local_bh_enable+0x40/0x40 [ 2111.060845][ T4883] nf_setsockopt+0x588/0x5e0 [ 2111.065445][ T4883] ip_setsockopt+0x6412/0x8ae0 [ 2111.070205][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.075397][ T4883] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2111.081207][ T4883] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2111.087347][ T4883] ? aa_label_sk_perm+0x7ed/0x9b0 [ 2111.092364][ T4883] ? do_futex+0x416b/0x6c50 [ 2111.096876][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.102171][ T4883] ? ipv4_pktinfo_prepare+0x820/0x820 [ 2111.107579][ T4883] tcp_setsockopt+0x239/0x270 [ 2111.112268][ T4883] ? tcp_sock_set_keepcnt+0x150/0x150 [ 2111.117635][ T4883] sock_common_setsockopt+0x16c/0x1b0 [ 2111.123037][ T4883] ? sock_common_recvmsg+0x2a0/0x2a0 [ 2111.128402][ T4883] smc_setsockopt+0x20b/0x1110 [ 2111.133167][ T4883] ? smc_shutdown+0x930/0x930 [ 2111.137841][ T4883] __sys_setsockopt+0x951/0xda0 [ 2111.143192][ T4883] __se_sys_setsockopt+0xdd/0x100 [ 2111.148237][ T4883] __ia32_sys_setsockopt+0x62/0x80 [ 2111.153344][ T4883] __do_fast_syscall_32+0x129/0x180 [ 2111.158538][ T4883] do_fast_syscall_32+0x6a/0xc0 [ 2111.163388][ T4883] do_SYSENTER_32+0x73/0x90 [ 2111.167887][ T4883] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2111.174201][ T4883] RIP: 0023:0xf7f1d549 [ 2111.178283][ T4883] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2111.197893][ T4883] RSP: 002b:00000000f55170cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2111.206302][ T4883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2111.214279][ T4883] RDX: 0000000000000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 2111.222238][ T4883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2111.230198][ T4883] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2111.238159][ T4883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2111.246142][ T4883] [ 2111.248456][ T4883] Uninit was stored to memory at: [ 2111.253482][ T4883] kmsan_internal_chain_origin+0xad/0x130 [ 2111.259193][ T4883] __msan_chain_origin+0x57/0xa0 [ 2111.264122][ T4883] do_ip_vs_set_ctl+0x1296/0x34a0 [ 2111.269136][ T4883] nf_setsockopt+0x588/0x5e0 [ 2111.273718][ T4883] ip_setsockopt+0x6412/0x8ae0 [ 2111.278475][ T4883] tcp_setsockopt+0x239/0x270 [ 2111.283144][ T4883] sock_common_setsockopt+0x16c/0x1b0 [ 2111.288564][ T4883] smc_setsockopt+0x20b/0x1110 [ 2111.293402][ T4883] __sys_setsockopt+0x951/0xda0 [ 2111.298243][ T4883] __se_sys_setsockopt+0xdd/0x100 [ 2111.303279][ T4883] __ia32_sys_setsockopt+0x62/0x80 [ 2111.308382][ T4883] __do_fast_syscall_32+0x129/0x180 [ 2111.313569][ T4883] do_fast_syscall_32+0x6a/0xc0 [ 2111.319281][ T4883] do_SYSENTER_32+0x73/0x90 [ 2111.323777][ T4883] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2111.330090][ T4883] [ 2111.332404][ T4883] Local variable ----arg@do_ip_vs_set_ctl created at: [ 2111.339158][ T4883] do_ip_vs_set_ctl+0xd9/0x34a0 [ 2111.344002][ T4883] do_ip_vs_set_ctl+0xd9/0x34a0 [ 2111.348832][ T4883] ===================================================== [ 2111.355746][ T4883] Disabling lock debugging due to kernel taint [ 2111.361881][ T4883] Kernel panic - not syncing: panic_on_warn set ... [ 2111.370650][ T4883] CPU: 0 PID: 4883 Comm: syz-executor.5 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 2111.380627][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2111.390670][ T4883] Call Trace: [ 2111.393963][ T4883] dump_stack+0x21c/0x280 [ 2111.398286][ T4883] panic+0x4c8/0xea7 [ 2111.402178][ T4883] ? add_taint+0x17c/0x210 [ 2111.406607][ T4883] kmsan_report+0x1da/0x1e0 [ 2111.411125][ T4883] __msan_warning+0x5f/0xa0 [ 2111.415645][ T4883] do_ip_vs_set_ctl+0x19c2/0x34a0 [ 2111.420667][ T4883] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2111.426735][ T4883] ? __perf_event_task_sched_in+0xad0/0xb40 [ 2111.432639][ T4883] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2111.438696][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.443893][ T4883] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2111.450078][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.455282][ T4883] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2111.461081][ T4883] ? local_bh_enable+0x40/0x40 [ 2111.465836][ T4883] nf_setsockopt+0x588/0x5e0 [ 2111.470421][ T4883] ip_setsockopt+0x6412/0x8ae0 [ 2111.475182][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.480369][ T4883] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2111.486192][ T4883] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2111.492249][ T4883] ? aa_label_sk_perm+0x7ed/0x9b0 [ 2111.497276][ T4883] ? do_futex+0x416b/0x6c50 [ 2111.501771][ T4883] ? kmsan_get_metadata+0x116/0x180 [ 2111.506960][ T4883] ? ipv4_pktinfo_prepare+0x820/0x820 [ 2111.512408][ T4883] tcp_setsockopt+0x239/0x270 [ 2111.517079][ T4883] ? tcp_sock_set_keepcnt+0x150/0x150 [ 2111.522440][ T4883] sock_common_setsockopt+0x16c/0x1b0 [ 2111.527804][ T4883] ? sock_common_recvmsg+0x2a0/0x2a0 [ 2111.533106][ T4883] smc_setsockopt+0x20b/0x1110 [ 2111.537867][ T4883] ? smc_shutdown+0x930/0x930 [ 2111.542535][ T4883] __sys_setsockopt+0x951/0xda0 [ 2111.547378][ T4883] __se_sys_setsockopt+0xdd/0x100 [ 2111.552479][ T4883] __ia32_sys_setsockopt+0x62/0x80 [ 2111.557585][ T4883] __do_fast_syscall_32+0x129/0x180 [ 2111.562775][ T4883] do_fast_syscall_32+0x6a/0xc0 [ 2111.567615][ T4883] do_SYSENTER_32+0x73/0x90 [ 2111.572109][ T4883] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2111.578428][ T4883] RIP: 0023:0xf7f1d549 [ 2111.582485][ T4883] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2111.603293][ T4883] RSP: 002b:00000000f55170cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2111.611695][ T4883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2111.619659][ T4883] RDX: 0000000000000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 2111.627634][ T4883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2111.635613][ T4883] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2111.643586][ T4883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2111.652243][ T4883] Kernel Offset: disabled [ 2111.656621][ T4883] Rebooting in 86400 seconds..